AZZA Jamal

Infrastructure, platform & cybersecurity lead for one of Morocco's largest industrial groups (energy, fuel, real estate, telecom) — 80+ sites, 3,000 users, 220 VMs, team of 10. • Deployed Fortinet SD-WAN across 80 sites, replacing legacy MPLS — secure direct-internet breakouts, unified WAN + security fabric. • Modernized security with AI-driven products — CrowdStrike Falcon XDR + MSSP SOC over 3,000 endpoints (replaced legacy ELK SIEM in 2025); hybrid WAF combining Cloudflare Enterprise externally and OpenAppSec (ML-based) internally. • Led VMware → Proxmox migration: 220 production VMs / 100 TB across two datacenters (Broadcom-driven). Zero business-hours impact — saving ~2M MAD/year (~$200K USD). • Containerized core internal apps onto Kubernetes — multi-cluster across dev/staging/prod with 30+ workloads. Standardized base images, RBAC, namespaces, pod-security; self-service deploys for app teams. • Built standardized CI/CD pipelines across multiple app teams — build, test, SAST / secret scanning, policy-gated K8s deploys. Faster releases, audit-ready for ISO 27001. • Built an integrated observability stack — Prometheus + Grafana, Datadog, Zabbix for legacy fleets. Unified dashboards feed both SRE response and SOC visibility, closing the infra-to-security telemetry gap. • Integrated AI-augmented engineering (Claude Code, LLM tooling) into daily workflow — Ansible, IaC, Python / Bash automation, runbooks, security docs. Measurable cycle-time reduction on hands-on work. • Implemented Microsoft AD Tiering (Tier 0/1/2) across 3,000 users, 2 forests, 3 domains — hardened 30 Tier-0 assets, eliminated lateral-movement vectors, shrank credential-theft blast radius. • Drove ISO/IEC 27001:2022 certification end-to-end — gap assessment, ISMS, Statement of Applicability, risk treatment, successful Stage 1 & 2 audits.

Led the technical organization of an IT services firm — 15 engineers delivering infrastructure projects and offensive security (penetration testing) for enterprise customers across oil & gas, food industry, and customs / public sector. Highlights: • Owned the penetration testing practice — both executing engagements hands-on and overseeing the team across external, internal, and web-application scopes. • Delivered enterprise infrastructure projects across customer industries — datacenter design, virtualization, network modernization, and Active Directory hardening. • Owned pre-sales scoping, delivery quality, and post-engagement client retention.

Owned IT strategy and operations for DIMATIT, a Moroccan plastics manufacturer. Led a team of 4 covering infrastructure, end-user computing, and telephony. Highlights: • Led migration from traditional desktops to a full VMware Horizon VDI environment for 80 users — standardized end-user computing, improved security posture (centralized data, hardened images), and reduced endpoint management overhead. • Migrated company telephony from legacy analog/PBX to SIP-based IP telephony with Orange Maroc trunks — modernized voice infrastructure and reduced call costs while enabling softphone integration.

Roles in IT infrastructure and systems engineering across Moroccan and regional employers, building the foundation for current leadership expertise. Details available on request.