CCIE Security #70599 · Riyadh, Saudi Arabia
I design and secure the networks that enterprises run on — advanced routing, SD-WAN across sites, and multi-vendor security fabrics that hold up under audit and under attack.
See how I workA reference architecture I build and secure daily
Running a team of network and security engineers across enterprise estates — incident response, NCA compliance, multi-vendor security fabrics, and the integrations that government entities depend on.
SEC / 01
Services
Enterprise security and infrastructure work, scoped to fit environments where downtime is expensive and compliance is not optional.
Identity-driven access across wired and wireless estates using Cisco ISE with 802.1X, MAB, TACACS+ and RADIUS — so every port knows who is on it, and administrative credentials stay accounted for.
Firewall estates designed, deployed and tuned across mixed vendors — deep packet inspection, application control, URL and DNS filtering, IPS and DoS protection, mapped to NCA compliance requirements.
Token-based MFA for remote access, built on FortiAuthenticator with LDAPS synchronisation to Active Directory, RADIUS proxying for credential validation, self-registration and password reset by SMTP.
Real-time visibility with no blind spots — Zabbix, PRTG and FortiAnalyzer for centralised logging, alerting, telemetry and performance baselines, plus dashboards the operations team will actually read.
F5 BIG-IP LTM for high-availability load balancing, and ASM policies tuned against the OWASP Top 10 — blocking injection and XSS without generating false positives that page your team at 2 a.m.
BGP, OSPF and EIGRP across multi-tier, multi-vendor estates — Cisco Catalyst and Nexus 9000, ASR/ISR and C8300 routers, Dell spine-leaf fabrics, and Cisco WLC 8500/9800 wireless for secure mobility.
SEC / 02
Work
Enterprise deployments where advanced routing met a hard security requirement — and both had to survive a failover test.
SEC / 03
Method
Five stages, in order. Nothing reaches production that has not been designed on paper and proven in a lab first.
Survey the estate to find the vulnerabilities, hardware limits and compliance gaps that are actually there — and confirm alignment with NCA cybersecurity requirements before anything is designed.
Produce the high-level design, low-level design and method of procedure. Secure remote access and network segmentation get blueprinted in writing, so the change window has a script rather than an improvisation.
Turn the blueprint into a testable model. Lab simulations and failover testing across primary and secondary data centres prove service continuity and security policy before a single production device is touched.
Execute the configuration across routing protocols and multi-vendor security fabrics — Cisco, Fortinet, F5, Palo Alto — building an estate that is both highly available and defensible.
Watch performance through Zabbix, PRTG and FortiAnalyzer, handle security incidents, hunt threats and keep device operating systems current. The handover includes the documentation to run it without me.
SEC / 04
Profile
I'm a CCIE Security-certified network and security engineer with more than eight years designing and securing enterprise infrastructure. I currently lead a team of network and security engineers, assigning work to junior engineers while personally handling complex configurations, incident response, upgrades and integrations with third-party government entities.
Most of my work sits where routing meets compliance: a data centre that has to migrate without dropping a session, a WAF policy that has to block injection without breaking a published application, an MFA rollout that has to satisfy an auditor and a thousand users at the same time. I believe in precision, rigorous testing, and architectures that hold up when something fails at 3 a.m.
Off the clock, I put the same organising instinct into coordinating and playing for our nine-a-side football squad, the Infrastructure Team.
Routing & switching
Security
Access & identity
Application delivery
VPN & SD-WAN
Monitoring
Wireless
Platform