BEN KADOUR AMENI

– Led network and cybersecurity projects aligned with customer business objectives and organizational security strategy. – Successfully deployed and configured advanced security solutions such as firewalls, SIEM, WAF, IAM, DLP. – Managed Proof of Concept (POC) projects, demonstrating new security tools and technologies. – Provided troubleshooting and technical support for customers and provided comprehensive documentation. – Developed project planning and execution to meet client requirements

– Implemented security infrastructure and solutions based on Cisco, Fortinet, McAfee, IBM and NetScout communications solutions. – Support clients on security operations: incident identification and response, potential vulnerabilities identification. – Troubleshoot and technical support for customers on security, routing, switching issues. – Redesigned enterprise network and security architecture to improve segmentation, scalability, and resilience. – Led the deployement Cisco ACI fabric (Leaf/Spine, Apics, Tenants, VRFs, Bridge Domains, EPGs, Contracts, L3out, VMM). – Installed, configured Cisco Catalyst 9200L switches, including VLANs, trunking, STP, and access-layer best practices. – Migrated edge firewall infrastructure from Cisco ASA to Palo Alto PA-400. – Migrated Cisco ASA to Cisco Firepower, including access control policies, and IPS configuration. – Migrated Cisco ASA to Fortigate and integrated with FortiManager/FortiAnalyzer. – Migrated cloud FTD 4100 firewalls to Fortigate1800F in HA mode. – Migrated Huawei firewalls to Fortinet firewalls. – Migrated FortiWeb WAF cluster from 1000D to 1000F series with minimal downtime (HTTPS inspection, Application control, Web filtering). – Implemented out-of-band management network for fail-safe control and availability. – Deployed NetScout Arbor for enterprise Anti-DDoS protection. – Deployed centralized SIEM platforms ( IBM Qradar, Fortisiem) for enterprise and government clients. – Integrated firewalls, network devices, servers, and security tools as log sources. – Built correlation rules and offense workflows aligned with MITRE ATT&CK. – Reduced false positives and improved incident response efficiency. – Led full-scale SD-WAN deployment across multiple sites. – Configured FortiGate devices, IPsec VPNS, GRE tunnels, routing protocols, and SD-WAN policies. – Monitored and optimized performance using FortiAnalyzer. – Delivered Cisco ISE NAC POC and full production deployment (802.1x authentication, authorization, posture, profiling). – Implemented Forcepoint DLP to protect sensitive government and enterprise data. – Contributed to One Identity PAM implementation.s. – Contributed to FortiSOAR implementation and security automation use cases.