Mohamed Ghezzal

Multi-site environment (25 sites) in build and run. Network security and segmentation (T0/T1/T2 zones, DMZ, VPN) with inter-zone policies on Palo Alto PA-3220 firewall. Deployment and administration of Cisco ISE 3.4 (AD integration, Policy Sets, 802.1X, TACACS+). Migration of the Wi-Fi infrastructure to WLC 9800-CL and deployment of Catalyst 9200L switches across all sites. Technical lead for the MPLS to SD-WAN migration. Installation and configuration of an F5 BIG-IP LTM cluster, as well as WAF/AWAF policies (web applications and APIs).

Stack: Palo Alto, Cisco ISE, Catalyst 9200L, WLC 9800-CL, F5 BIG-IP LTM/AWAF, MPLS/SD-WAN

❖ LPM Network Segmentation Project /16 into 3 subnets (Data, Backup, Infra)

• o Participation in project kick-off meetings

• o Implementation of technical protocols and security plans:

◦ - Redesign of routing on the Catalyst 9500 Core to reflect the new segmentation

◦ - Update of filtering rules on the Root FW Fortigate and the 3 ISFWs (Internal Segmentation Firewalls) to adapt security policies to new segments.

◦ - IP reconfiguration of servers to ensure compatibility with new IP address ranges and guarantee service continuity.

❖ Operational Readiness (MCO) of the LPM architecture

• o Management of site-to-site IPSEC VPN and SSL VPN

• o Firewall policy management:

◦ - Implementation of security profiles (SSL inspection, antivirus, web filtering)

◦ - NAT and VIP object configuration, traffic opening

• o Fortigate firmware update to improve network security and performance

• o FSSO authentication to improve user experience

• o SVL configuration of Catalyst 9500 to increase storage capacity with the addition of backup servers

• o Operation and administration of F5 BIG-IP LTM: adding pool members, creating Virtual Servers, SNAT, and Profiles

◦ - Optimization of business application Load Balancing (LTM)

• o Drafting and updating documentation following interventions

• o Development of various weekly and monthly network reports.

❖ Level 2 Support and Incident Management

• o User assistance with JIRA, and technical escalations

• o Monitoring with FortiAnalyzer (FAZ)

❖ Technical Environment

• o FORTIGATE 500E, CISCO CATALYST 9500, 9300L, 4510R, 3850, F5, FAZ

Three structuring projects carried out in parallel with MCO. SD-WAN deployment on 20 sites (Fortigate 40F/60F/100F), MPLS site migration, and underlay link upgrade to fiber. Complete Wi-Fi migration to Aruba Central (200 AP swap, coverage audit, SSID migration). Stormshield SN3000 firewall migration to Fortigate 600F, with POC, IPSEC/SSL VPN, Central SNAT/DNAT, and Active Directory integration.

Stack: Fortinet 40F/60F/100F/600F, Stormshield SN3000, Aruba Central, Nexus 9000, Catalyst 9200L