Freelancer profile translated to English.
Back to original languageAbout Ayoub
Security and Network Engineer specialized in HLD/LLD design, build & run of critical infrastructures.
Expertise on Fortinet (FortiGate, SD-WAN), F5 BIG-IP (LTM, APM, ASM), Palo Alto, Check Point, Forcepoint.
Advanced skills in:
Security & Interconnection Architecture (IPsec/SSL VPN, SD-WAN, Network Segmentation)
Load Balancing & Web Publishing (F5, AVI, WAF)
DNS & DDI (EfficientIP, Cloudflare, F5 GTM)
Flow Management, NAT, Routing (OSPF, BGP, VLAN, IPv6)
Automation (Ansible, Python)
Available ASAP
French
Native or bilingual
Arabic
Native or bilingual
English
Native or bilingual
Can work on-site
Paris (up to 50km)
Experience
- Groupement les mousquetaires (STIME)Security Engineer – Architecture / Build / RunRETAIL (LARGE RETAILERS)June 2020 - March 2026 (5 years and 9 months)Paris, France
Projects:
o Cyber Crisis Management – Post-Ransomware Reconstruction, Mestdagh Subsidiary / Intermarché Belgium:o Opening of new mechanized or automated logistics bases:- Needs analysis and design of the perimeter security architecture (sizing, HA, technology choices)
- Definition of the network security policy and inter-partner flows (Mechanization, automation, air conditioning...)
- Design and implementation of a resilient SD-WAN interconnection architecture with the central IS, ensuring the optimization of flows and business continuity of applications
- Integration of Firewalls with Management tools, log management, and supervision
- Functionality testing and cutover
- Participation in the drafting of technical architecture documents for Point of Sale and production unit logistics bases
- Migration and Publishing of the group's new websites (DNS creation, Vs, pools, iRules, health checks, flow opening...)
Operations:
o Secure exposure of web services via AVI and F5 (GTM, LTM, and ASM):- DNS configuration, Wide-IP, VS and server pools, monitoring and iRules
- Implementation of SSL offloading and SSL/TLS certificate management (generation, renewal, external CA)
- Deployment of WAF (ASM) policies
- Opening of necessary flows
o Management of Network and Security Incidents:- Management of SSL VPN access for all remote workers (COVID Context)
- Management of flow rules on multiple devices (Fortigate, Pulse, PaloAlto, ...)
- Upgrade of all security equipment as part of obsolescence management
- Creation of new and annual renewal of certificates
- Addition, Modification, and deletion of DNS entries under Efficient IP and Cloudflare
- Management of complex incidents in collaboration with various editors (Fortinet, Forcepoint, F5...)
- BNP PARIBASNetwork Security Expert (Consultant)BANKING AND INSURANCESeptember 2019 - June 2020 (9 months)France
Support:
- Network and Security Incident Management:
o Access and filtering incident managemento Remote user assistanceo Routing incident managemento Technical support during go-lives (MEP): network and security assistance outside of business hoursOperations:
- Management and operation of BNP's Firewalls and security equipment through the Tuffin system to meet business needs:
o Flow rule management (Addition and deletion)o Firewall configuration (routing, NAT, SNMP, web filtering, ...)o Generation of security reports- Management and maintenance of user remote access
- Maintain client infrastructure access and supervision
- Verification of security policy consistency
- Drafting and updating technical procedures
- Technologies: Tufin, PaloAlto, Checkpoint
- APIXIT (DCI)LEVEL 3 SECURITY SUPPORT ENGINEERBANKING AND INSURANCEApril 2017 - August 2019 (2 years and 4 months)France
Support:
- Network and Security Incident Management:
o Resolution of F5 incidents (pools down, health checks, inoperable virtual servers)o Analysis and troubleshooting of F5 HA (failover, sync issues)o Resolution of VPN incidents (IPSEC and SSL)o Resolution of routing-related incidents (Anti-spoofing, policy routes, OSPF...)o Resolution of authentication incidents (FSSO, Radius,...)o Analysis of HA (High Availability) incidentso Analysis of memory and CPU incidentso Hardware testing and RMA (Replacement of Equipment)- Preventive site visits to clients
- Collaboration with editors (F5, Fortinet...) to resolve complex incidents and fix bugs
Operations:
- Management and operation of clients' Firewalls, Load Balancers, and security equipment:
o Firewall configuration (addressing, routing, web filtering, supervision...)o Creation and maintenance of remote VPN SSL and site-to-site accesso Management of security policy and flow ruleso Configuration and operation of F5 Load Balancers (VIP, pools, SSL offloading, health checks)- Supervision and Reporting:
o Implementation and maintenance of client infrastructure supervisiono Log analysis and security reports (FortiAnalyzer) and formulation of improvement recommendations- Maintenance and Governance:
o Obsolescence management and security patch deploymento Planning and execution of equipment upgrades (Fortinet, F5, Forcepoint...)o Drafting and updating technical procedures- Technologies: Fortinet, F5 (LTM, GTM, APM, ASM), Ivanti (Pulse Secure), Forcepoint, Checkpoint, Cloudflare
Recommendations
Be the first to recommend Ayoub
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master in Telecommunications and NetworksCNAMMaster Télécommunication et réseaux
- Engineering Diploma in Telecommunication and Network Systems EngineeringENSADiplôme d'ingénieur Génie des systèmes de télécommunication et réseaux
Certifications
- NSE 5 Fortimanager SpecialistFORTINET2021
- NSE 4 Network Security ProfessionalFORTINET2020