HASSANE EL FLOULI

– Context: Charged with MPLS to SDWAN Fortinet migration for video surveillance and SDWAN Meraki migration for end-users at Sites and GAZ depots within ANTARGAZ. – Preparation of integration plans and tests. – Design and implementation of network and security infrastructures, and support for them. – Creation and updating of documentation (HLD, LLD, DAT, DEX, PDS). – Consulting and support for users to improve methodology, norms, and standards. – Verification of network designs and recommendations based on best practices and compliance policies. – BUILD: – Appropriation and drafting of business requirements. – Project execution: engineering, deployment, migration/production, knowledge transfer, and training. – Preparation of steering committees: agenda, support, and decision-making documents. – Support for production launches, knowledge transfer, training, and documentation. – RUN: – Supervision, configuration, and maintenance of network equipment, firewalls, LB, IDS. – Technical support N3. – Handling change requests (new network connections, N2K extension). – Software maintenance for equipment. – Implementation of new services (IOS upgrade, license renewal). – Management of flow filtering gateways, antivirus, and anti-spam (Forcepoint, Meraki, Fortinet). – Integration of Monitoring and Logging tools (Solarwind, ZABBIX). – Verification of Routing & Configuration for Routers and Switches (Catalyst, Alcatel): OSPF, MPLS, VRF, BGP. – Migration of Standard WIFI Norms. – Advanced Windows and Linux infrastructure administration. – DEFENSE, ACCESS CONTROL, CONFIDENTIALITY. – Strong proficiency in LINUX, UNIX, DHCP, LAN, WAN environments. – Patching and Security measurement: OS, App, Port, Web, zero-day, Services, AD, DNS, DHCP, LAN, STP, CDP, VLAN, IOS, Switch, Router, etc. – Drafting a manual to raise personnel awareness about Cyber Security, skills transfer, and training. – Installation and setup of Cisco, HP & Alcatel network equipment. – Ensuring proper functioning of Antivirus, Anti-spam, AD, Firewall. – Replacement of Switches, updating IOS Switches (version upgrade). – Security of network infrastructures. – Maintenance and monitoring of projects and N3 technical support.

– Context: Integration and MCO for new sites within ALTEN networks, including SDWAN Fortigate Datacenter and 150 Branches migration to replace MPLS, L2L OBS and VPN IPSEC, Zscaler Proxy Cloud replacement, and NAC for 802.1X user access security. – Preparation of integration plans and tests. – Design and implementation of network and security infrastructures, and support for them. – Creation and updating of documentation (HLD, LLD). – Consulting and support for users to improve methodology, norms, and standards. – Verification of network designs and recommendations based on best practices and compliance policies. – Périmètre: LAN/MAN/WAN, 1 Datacenter in Cluster Paris, 5000+ network devices, 150+ security devices, 150+ Regional sites, 2500 users in Active Directory, 300+ permanent interconnections to distant IS. – BUILD: – Market study Tech-Eco, solution panel, comparison and evaluation of solutions. – Design and architecture (Switching, Routing, Security). – Feasibility study. – Technical study of network integration topics on IPPlan, Advanced Network Architectures. – Technical specifications study: architecture, security policy, engineering. – Drafting specifications and technical responses to tenders. – Drafting technical documents (DAT, DIT, DEX). – Project committee. – Appropriation and drafting of business requirements. – Project execution: engineering, deployment, migration/production, knowledge transfer, and training. – Preparation of steering committees: agenda, support, and decision-making documents. – Support for production launches, knowledge transfer, training, and documentation. – Definition of Backbone engineering and DATACENTER edge equipment. – Support N3 for backbone inter-site design on Service Now. – Training and assistance for N1/N2 network AT. – Infrastructure relocation. – Design, definition, and integration of technical architecture in PRA and PCA mode. – Definition and implementation of supervision, monitoring, and reporting elements. – Drafting and establishing MAN and LAN architecture diagrams considering resource access needs and constraints. – Managing interconnections with telecom operators. – Coordinating router deployment with telecom operators. – Configuration exchange (interface, VLAN, static). – Testing nominal/backup switchover. – Configuration of network and security equipment. – Infrastructure fault and functional testing. – Relocation of total platforms for 5 sites without service interruption. – RUN: – Supervision, configuration, and maintenance of network equipment, firewalls, LB, IDS on IMC, NEDI. – Support N3 Service NOW. – Handling tickets and change requests in Service NOW. – Maintenance of 5000 equipment. – Implementation of new services (IOS upgrade, license renewal, ...). – Management of flow filtering gateways, antivirus, and anti-spam: ASA, Fortinet, Aruba, Keemp. – Integration of Monitoring and Logging tools. – Verification of Routing & Configuration for Routers and Switches (Catalyst, HP): OSPF, MPLS, VRF, BGP. – Migration of Standard WIFI Norms. – Administration of Windows and Linux infrastructure. – Creation of VPN SSL connections (ASAv AnyConnect, FortiClient). – Drafting a manual to raise personnel awareness about Cyber Security, skills transfer, and training. – Installation and setup of Cisco, HP network equipment. – Ensuring proper functioning of Antivirus, Anti-spam, Firewall. – Replacement of Switches, updating IOS Switches (version upgrade). – Security of network infrastructures. – Maintenance and monitoring of projects and N3 technical support. – Gère les passerelles de filtrage de flux et antivirus et anti spam : ASA, Palo Alto, Aruba, F5. – Intégration des outils de Monitoring et Logs: IPS/IDS, Splunk, ESA/WSA, OSSEC. – Gestion et Dépannage de la Voip, Toip, SIP, H323, QSIG, ISDN(RNIS) et QOS. – Contre mesure de Sécurité : OS, App, Port, Web, zero-day, Services, AD, DNS, DHCP, LAN, STP, CDP, VLAN, IOS, Switch, Router, etc.

– Context: Integration and MCO for new sites within AXIANS CLOUD BUILDER networks, including Palo Alto and Cisco ASA-FTD technologies. – Migration of LAN in the tower to MERAKI Access Switches. – Management of Palo Alto Firewalls via Panorama. – Migration of EMEA subsidiaries to ToIP Cisco Collaboration v11.5: drafting of responses to tenders, planning, organization of teams (6 engineers), technical assistance, animation of Co.Proj & COPIL, client relations, escalation management. – Security strategies to protect infrastructure: Firewall ASA5585, PALOALTO PA-5000. – Technical support N3 Service Now for all entities (problem processing and analysis) and MCO. – Interconnection of Sites via dedicated lines: SDWAN, L2L, MPLS, VPN IPSEC. – Participation in application or technical evolution projects and HNO. – Evaluation of new network architectures and technologies. – Integration and Configuration of Cisco products: ASA5585_FirePower, CSVB, Merraki_MX,150,100. – Management of internal network (firewall, switch, Router, VLAN). – Detection of failures: Service TCP/IP, Windows, Network Connectivity, Application. – Ensuring permanent technological watch. Drafting reports, proposals, technical documentation and user guides. Management of maintenance and support contracts.

– Context: As Network and Security Engineer, coordinated with the Cloud Infra department (Network Teams) to implement the Leaf-Spine ACI architecture during the transfer of the Central Site to a new site. – Administration and Surveillance of two Nexus 9332C Core Switches and four Nexus 9300 Distro Switches. – Security strategies to protect infrastructure: two ASA 5555 Firewalls. – Level 3 technical support for all entities (troubleshooting and problem analysis) via ServiceNow. – Interconnection of sites via VPN IPSEC, L2L. – Ensuring MCO for Core, Distro, and Access Cisco Switches. – Creation of VLANs, VLAN routing, flux opening, NAT, Aggregation, vPC, Peerlink, STP, etc. – Participation in application or technical evolution projects. – Evaluation of new network architectures and technologies. – Ensuring DNS and DHCP management, reliability, and optimization via Efficient IP. – Integration and Configuration of Cisco & Aruba products: ASA5555_FirePower, CSVB, Merraki_MX, Small Business for local establishments. – Security countermeasures: AD, DNS, DHCP, LAN, STP, CDP, VLAN, IOS, Switches, Router. – Management of internal network (firewall, switch, Router, VLAN). – Detection of failures: Service TCP/IP, Windows, Network Connectivity, Application. – Ensuring permanent technological watch. – Drafting reports, proposals, technical documentation, and user guides. – Management of maintenance and support contracts.

– Context: Responsible for IT infrastructure security and proper functioning, and Network Administrator for CMB Plastique Maroc, managing plastic bottle cap production activities. – Infrastructure Management: – Operational maintenance of IT equipment (Workstations, Servers, Printers, IT rooms, Time clocks, Surveillance cameras...). – Infrastructure management: Active Directory, DHCP, DNS, GPO, Scripting. – Implementation and configuration of various servers, Routers, & Switches. – Routing: OSPF, BGP, Static. – Firewall: Installation, Configuration, Administration Netgear. – Web Filtering, Port Forwarding (NAT, PAT), Log Analysis, IPS/IDS, Anti-spam etc. – Kaspersky Antivirus Server Administration Kit. – Management, follow-up, escalation, and closure of tickets. – Backup & Save: Symantec Backup. – Incident Management and N3 Support. – ERP Sage X3 Administration, creation of reports with Crystal Report. – SCCM 2010 Administration. – Inter-site links via Dedicated Lines: PPP CHAP, VPN.

– Context: Administration and management of Linux Redhat5 infrastructure for a micro-electronic circuit realization project for Atmel, Texas Instrument. – Ensuring proper functioning and evolution of production infrastructure monitoring tools. – Securing and protecting infrastructure: Fortigate D60 Gateway Firewall. – Ensuring DNS and DHCP Management. – Management of Processes, services, and background tasks. – Inter-VLAN Routing, ACL, Security Port Switch etc. – Administration of Unix Red Hat Servers (Samba, NFS, Backup etc.). – Providing user support for issues related to deployed tools. – User access rights and files. – Starting execution levels. – Creation of Shell scripts for task automation. – Handling N2/N3 incidents on the platform.