Moez Jaballah

As a network engineer, I joined the SIRELY team (Security Integration Network LinkY) which handles RUN and BUILD in Enedis' dual-datacenter environment.

• Level 3 Support

• Ensure the proper availability of the Datacenter network (with on-call duty)

• Writing Technical Installation Procedures

• Migration of VRFs on security equipment (Cisco ASA to Fortigate)

• Upgrade of Fortigate Firewalls in cluster (60E, 1500D, 3400E)

• FortiManager: Integration, policy configuration, and Fortigate upgrade

• FortiManager operation (Policy creation, per-mapping per device, etc.)

• FortiManager upgrade (and ADOM upgrade)

• Configuration of policies and NAT on Firewalls (Cisco ASA, Fortigate)

• Implementation of VDOM on Fortigate and creation of VDOM link

• Implementation of Palo Alto cluster

• Palo Alto cluster upgrade

• Configuration of vCMP and creation of vCMP guest on F5

• Creation of DNS zones and forwarding on Efficient IP

• Pulse Secure operation

• Upgrade of APICs (controllers) and nodes (Spines/Leaf) on ACI

• Cisco ACI operation (APIC on Spines/Leaf)

• Implementation of the Cisco ACI fabric

o Configuration of Tenants, Application Profiles, Bridge Domains, EPGs (Endpoint Groups)

o Contract configuration

o VRF configuration

o Access Policies configuration (VPC, VLAN POOL, AAEP, Leaf Profile)

• Creation of Cisco ACI installation procedure

Network Equipment:

• Cisco Catalyst 3850

• Cisco Nexus 3K, 5K, 7K, 9K

Firewall, Security:

• Cisco ASA 5585

• Fortigate 60E, 200E, 1500D, 3400E

• FortiManager VM64

• F5 LTM i5800

• Pulse Secure: PSA-3000

• Palo-Alto Networks: PA3220, PA3250

Load-balancer

F5: LTM

Cybersecurity: Splunk, Tufin, Skybox

Monitoring:

- Libre NMS, Centreon

Misc Tools: Efficient IP

Design and deployment of secure, high-availability network architecture

• Ensure the proper availability of the Datacenter network (Level 2 support with on-call duty)

• Infrastructure monitoring via PRTG and CACTI

• Configuration of routing protocols to ensure automatic failover without downtime in case of major crash

• Execution of client projects

• Writing operational procedures, network diagrams

• Deployment and configuration of network and security equipment and services

• Migration of public IP address ranges for clients

• Migration from F5 VE to physical F5

• Migration from CSS load balancer to F5

• Implementation of an F5 WAF solution

• Implementation of a secure Wi-Fi solution with 2 SSIDs

• ACL, NAT configuration on Firewalls

• Management of network and security incidents and requests.

• Configuration backup management via Cattools

• Logs tool management (graylog)

• Update of F5 client certificates

• Implementation of site-to-site VPNs on Cisco ASA, Fortinet, and PFsense firewalls

• Implementation of Client-to-site VPNs on Cisco ASA, Fortinet, Sophos, and PFsense Firewalls.

• Update of network, security, and load balancer equipment firmwares

• Deployment of F5, PFsense VMs

• VLAN deployment on Nutanix, VMware

• Network redesign project and migration to a Spine/Leaf architecture (in progress)

• Technical Environment: Network Equipment:

• Cisco Catalyst 2950, 2960, 3560, 3750, 4500, 6506

• Cisco ASR 1001

• Cisco Nexus 9200

• Arista 7150

• DELL S4810 Firewall, Security:

• Cisco ASA 5505, 5506-E, 5510, 5515, 5525

• Fortigate 60d, 80d, 81d, 100D, 400D, 501E

• Arbor: Anti-DDOS

• Sophos Vyatta PFsense

• F5 ASM, WAF

Load-balancer

• F5: LTM

• Cisco CSS

Monitoring:

- CACTI, PRTG

Misc Tools:

• GLPI, Hostbill, IPAM, cattools, Ansible

Systems:

• Microsoft: Windows Server 2012, 2016

• Linux: Ubuntu, Debian

Virtualization:

• VMware 6.5, Nutanix

Assignment at Crédit Agricole Technologies & Services (12/2015 to 03/2016) Intervention on the RUN part (Level 2 support) of the LAN-SA MCO/ MEP Network domain. The domain covers 139 administrative sites.

• Actions performed on the RUN part:

• Network incident management / Implementation of corrective and security actions

• Opening incident tickets with Orange Business Services and IBM (Riverbed)

• Processing service catalog requests

• Network equipment administration

• Maintenance of operational documents

• Technical Environment: WAN Cisco: C2951, C3825, C3925, 7200, 7600

LAN Cisco: Catalyst 2950, 2960, 3560, 3750, 4500, 6500 etc.

LAN HP: HP5900, 5500, 5230, AH3600

Traffic Optimization: Riverbed 5050L

Tools: Cisco LMS, HP IMC, CMC Riverbed, CACTI, SolidServer, Cisco WLC

Network Security: Cisco Secure ACS

Assignment at ERDF (06/2013 to end of 10/2015):

• Specification and engineering of the project

• Collection and study of needs

• Development of a workload and a schedule

• Writing of the architecture document, deployment and operational procedures

• Implementation of operational plans

• Training of the outsourcing provider

• Management of an outsourcing team in an ITIL context

• Level 3 Support (Incident processing and assistance to the outsourcing provider)

• WIFI Project: Deployment of an internal and external WIFI network on several sites in Lyon and Paris and implementation of detailed and automated reporting on Wifi usage

• Shared Internet: Sharing of SDSL lines

• Implementation of a Syslog server

• Migration of Catalyst 3750 core networks to 6506-E

• Deployment of Cisco Prime

• Technical Environment:

• Cisco Controllers (2504, 5508) and APs (1602, 2602)

• Cisco Catalyst 2950, 3560, 3750, 4506E, 6504, 6506E, 6807XL, Nexus 5548

• Routing protocols (OSPF, BGP)

• Juniper Firewalls (SSG-5, SSG-350M)

• Cisco Prime Infrastructure and LMS

• Infovista Probes and SDM