Freelancer profile translated to English.

Description

Network security engineer with over 8 years of experience.

With over 8 years of experience in IT security and several professional certifications, I am able to effectively support projects for securing, auditing, and continuously improving IT infrastructures.

My CV is attached. I remain at your disposal.

Languages

French
Native or bilingual
English
Fluent
Arabic
Native or bilingual
Spanish
Basic

Workplace preferences

Can work on-site

Paris (up to 50km)

Intelcom
IT Security Engineer
DIGITAL AND IT
July 2018 - December 2021 (3 years and 6 months)
Rabat, Morocco
- Assignments with several clients:
• Study of the existing situation and development of engineering documents and target architecture.
• Research, analysis, and qualification of security tools.
• Implementation of configurations defined during the engineering phase.
• Replacement of security and network equipment.
• Reconfiguration and securing of client LANs.
• Deployment of new security solutions for our clients.
• Writing project deliverables (engineering document, operational document, acceptance test document, etc.).
• Skills transfer.
- Projects completed:
• Amendis Tanger: Migration of Fortigate firewall to two Forcepoint NGFW in HA. This process included
moving security rules and configurations to improve network security.
• National Ports Agency: Deployment of new infrastructures across 12 sites in different
cities in Morocco, as well as the implementation of IPsec connections.
• Archive of Morocco: Configuration and improvement of Sophos XG and Peplink firewalls to ensure data security
and operational continuity, in response to frequently reported incidents.
• Banque Populaire in Casablanca: Migration of CISO ACS authentication to the new ISE solution, with the
preparation of engineering and testing documents to ensure a smooth and uninterrupted transition.
• Morocco Highways: Migration of ACS authentication to ISE to strengthen security of access to
network resources.
• Barid Al Maghrib: Upgrade and maintenance of the ISE solution, as well as the installation and management of the
Ironport WSA (Web Security Appliance) solution and its SMA management tool to improve communication security and
web content management.
• Caisse de dépôt et de gestion: Installation and configuration of McAfee Web Gateway and Forcepoint Email
Security to enhance the security of web traffic and email communications.
• Crédit Agr
Network Security Network Administration Firewalling Network administration
Crédit Agricole-GIP
IT Security Engineer
BANKING AND INSURANCE
January 2022 - Today (4 years and 5 months)
Paris, France
- Assignment at Crédit Agricole Group Infrastructure Platform (CA-GIP):
BUILD N3 and assistance with the Run team on security equipment
• Technical feasibility study.
• Management of traffic openings (monitoring, analysis).
• Project management and monitoring.
• Replacement of network security equipment.
• MCO (Maintenance in Operational Condition) and operational processing (configuration, traffic opening).
• Network security policy management.
• Incident resolution related to our actions.
• Delivery of architecture documents and updates.
• N3 assistance for Major incidents.
- Projects completed:
• Update and bug fixing on all security equipment.
• Intervention on N3 incidents.
• Upgrade of the entire Fortinet solution (Fortigate, Fortimanager, Fortianalyzer),
BlueCoat, F5 (ASM, LTM) to new versions.
• Processing of traffic opening requests.
• Modification of the infrastructure by creating a new zone or changing routes.
• Automation of tasks on a Linux server for extracting policies and logs from the Fortigate firewall using scripts.
• Conducting BUILD to RUN skills transfer when a change is made.
• Backup or cloning of virtual machines via VMware.
• Traffic management project, the objective is to refine overly permissive rules, following a security audit.
• Migration to new Symantec SSP S410-40 appliance models and decommissioning of old SG S400-30 models.
• 3PG projects: consists of switching traffic to passive on the proxy and
firewall part and testing proper functioning.
• Supervision of all security equipment.
Network Administration Network Security Firewalling Proxy