[nom]
[téléphone] · | · [e-mail] · | · [lien] · | · [lien] · |
Tanger-Tetouan-Al Hoceima, Morocco
PROFESSIONAL SUMMARY
As a dedicated IT Infrastructure & Security Engineer with 3 years of experience, I specialize in network security, SIEM, and incident response. My expertise includes managing firewalls, such as Palo Alto, and deploying VMware virtualization to enhance security and efficiency. I am adept at using scripting languages like PowerShell and Python for automation, aligning with Spait Infotech's need for a Cyber Security Analyst skilled in security monitoring and log analysis.
CORE COMPETENCIES
Systems Engineering · Network Security · Virtualization · Infrastructure · ITIL Compliance
WORK EXPERIENCE
KOSTAL Group · December 2024 - Present
Enterprise Systems & Networks Engineer / IT Administrator
Security & Network Management: Configure, maintain, and secure Palo Alto Next-Generation Firewalls (NGFW), including 150+ active security rules, site-to-site IPsec VPNs, and remote-access SSL VPN tunnels serving 300+ active teleworkers.
Compliance & Security Audits: Played a key technical role in security control remediation, system hardening, and infrastructure prep for the corporate TISAX (Trusted Information Security Assessment Exchange) audit, leading to successful certification with zero critical non-conformities.
Systems Automation: Engineered customized PowerShell and Python scripts to automate repetitive system tasks (user onboarding/offboarding, server health reports, and OS patching audits), reducing manual administrative labor by 30% (saving ~12 engineer hours per week).
Monitor security tools such as SIEM, IDS/IPS, EDR, firewalls, and antivirus systems.
Detect, analyze, and respond to cybersecurity incidents and threats.
Investigate suspicious activities, malware infections, phishing attempts, and unauthorized access attempts.
Conduct vulnerability assessments and coordinate remediation activities.
Implement and maintain security controls, policies, and procedures.
Perform security risk assessments for applications, networks, and cloud environments.
Monitor user access, privileges, and identity management controls.
Apply encryption technologies and data protection measures.
Support incident response, disaster recovery, and business continuity plans.
Prepare security reports, audit documentation, and compliance evidence.
Collaborate with IT, development, infrastructure, and business teams to improve security posture.
Stay current with emerging cyber threats, vulnerabilities, and security technologies.
MS Company · June 2022 - September 2022
Computer Systems and Networks Technician / IT Administrator
Installed and managed centralized ESET Corporate Antivirus configurations across all servers and endpoints, achieving 100% security agent coverage and zero malware infections during tenure.
Deployed, programmed, and integrated 50+ high-definition IP surveillance cameras, centralized biometric time-attendance systems, and POS terminal servers.
Spearheaded Veeam and Acronis backup and recovery plans, securing and archiving 30+ TB of critical corporate business databases with a 100% successful recovery rate.
Provisioned, routed, and supported VoIP telephony infrastructure (3CX/Asterisk platforms) for 80+ corporate staff members.
Installed and configured 15+ Windows Server environments (AD, DNS, DHCP) and managed multi-vendor L2/L3 network switching architectures (HP, Aruba, Cisco, Juniper) for 120+ active endpoints.
Freelance · 2017 - 2022
IT Systems & Network Specialist
Network Design: Structured, wired, and installed high-definition CCTV security camera networks and local backup drives for small offices and retail centers.
Hardware & Systems Support: Provided custom system assembly, hardware maintenance, OS optimization, and diagnostics for 15+ local SMB and commercial clients.
KEY ACCOMPLISHMENTS
Infrastructure Virtualization & High Availability Deployment · VMware ESXi
Designed and deployed high-availability virtual environment cluster using VMware ESXi, enabling robust operational performance and complete backup redundancy strategies via Veeam.
Tech Stack: VMware ESXi v7.0/v8.0, NetApp SAN Storage, Veeam Backup & Replication
Enterprise Perimeter Security & VPN Architecture Implementation · Security
Designed, configured and secured remote infrastructure by deploying next-generation Palo Alto and Fortinet firewalls. Created robust site-to-site and client-to-site IPSec VPN tunnels with 2FA/AAA controls.
Tech Stack: Palo Alto NGFW, FortiGate, IPSec/SSL VPN, Radius, Entra ID SSO
EDUCATION
Professional Master's Degree in Computer Systems Networking and Security Engineering · Completed
American University of Professional Studies
Graduated July 2024* Core Curriculum:* CCNA & CCNP routing/switching, Cloud Architecture (Microsoft Azure AZ-104, AZ-800, AZ-801, AWS), OS
Administration (Red Hat Enterprise Linux - RHCE, Windows Server 2019/2022, Ubuntu, Kali Linux), Advanced Security (CEH concepts, Fortinet, Palo Alto
NGFW), Virtualization & Storage (VMware vSphere VCP-DCV, HCI, Veeam Backup), Infrastructure Monitoring (Zabbix, Nagios), Databases (SQL, PostgreSQL), and Project Management (ISO 22301, ITIL, MS Project).
Bachelor's Degree / Licence Professionnelle in Computer Systems Networking and Security Engineering · Completed
American University of Professional Studies
Graduated July 2023*
Technicien Spécialisé en Systèmes et Réseaux Informatiques · Completed
ESIASS
Graduated July 2021* Core Curriculum:* Windows Server 2012 Administration, Ubuntu Linux, Unix Operating Systems, CCNA Networking Fundamentals, Hardware Diagnostics, C++, HTML, SQL Server, and Microsoft Access.
High School Diploma / BAC Physical Sciences · Completed
Sijilmassa High School
Graduated July 2018*
PROFESSIONAL CERTIFICATIONS
Google IT Support Professional Certificate** (Completed) · Professional Status · Active
Introduction au monde des réseaux** (Completed) · Professional Status · Active
In-Progress Professional Targets:* Cisco CCNA (200-301) - *Exam scheduled*; Fortinet NSE 4 (FortiOS Network · Professional Status · Active
Security) & NSE 7; CCNP Enterprise core study.
TECHNICAL SKILLS
VMware ESXi (v6.5 - v8.0) · | · vCenter Server · | · Hyper-V
HPC Clusters · | · GPU Cluster Operations (NVIDIA DGX · |
Fortinet (FortiGate) · | · Cisco Security Suite · | · IPSec VPN
Multi-Factor Authentication (MFA) · | · WAF · | · EDR/XDR
Cisco Catalyst · | · Cisco Nexus · | · LAN/WAN · | · VLAN
EIGRP · | · BGP) · | · TCP/IP · | · SD-WAN · | · SNMP
Cisco Catalyst Center · | · Windows Server (2008 - 2022) · |
| · Proxmox VE · | · Xen Server · | · Nutanix AHV · | · Docker · |
CUDA) · | · Microsoft Azure (AZ-104) · | · AWS · | · Palo Alto NGFWs · |
| · SSL VPN · | · AAA (TACACS+/RADIUS) · |
| · ManageEngine Web Filtering · | · Varonis · | · ESET Endpoint Security · |
| · VTP · | · STP · | · EtherChannel · | · Routing Protocols (OSPF · |
| · DNS · | · DHCP · | · Wireshark Packet Analysis · |
Active Directory (AD DS) · | · Group Policy (GPO) · | · WSUS · | · WDS · |
Red Hat Enterprise Linux (RHEL)
Microsoft Exchange Server · |
| · Ubuntu Server · |
Veeam Backup & Replication
NetApp FAS/AFF (SAN/NAS storage administration) · |
| · Acronis Cyber Protect · |
SolarWinds
BMC Service Management · | · ITIL v4 · | · Nagios · |
TISAX Audit Compliance · | · SQL Server · | · PostgreSQL
| · GLPI · | · Zabbix · | · Datacenter Infrastructure Design · |
| · SAP ERP Access Management · | · Power BI (Data Modeling & Reports)
Bash
| · Tableau · | · Python · | · PowerShell · | · SQL · |
| · MLO
