Sr. IT Infrastructure Security Specialist Resume Example

Joined the health care group as part of the core HIS system planning and implementation for 4 hospitals. Main responsibilities are:

1. Evaluate the infrastructure security exposure and readiness for the new HIS system
2. Asses infrastructure and application communication channels internally and externally
3. Review and update the system and application security procedure inline with HIPPA/DHA requirements for the healthcare sector
4. Implementation of edge security for email communication system (Barracuda Email Security Gateway)
5. Data categorization and evaluation for medical and administrative services. RBAC implementation and enforcement
6. Designing and implementing infrastructure and application hardening methodologies (Servers, Storage, Network, Data Stores, Endpoints, Users) including least privileges, firewalls policies, access control, SSO, IAM, IPS, Encryption....etc.

Key Contributions:

1. Reviewed and updated the organization Information Security Policies and Procedures in compliance with international and governmental standards (ISO27k, NEESA).
2. Work with executive management to enforce and apply information Security Standards
3. Participate in BIA with key business functions heads. Defining priorities, dependencies, key systems and tolerable downtime.
4. Risk Assessment. Assign and review security controls to mitigate, avoid or accept of the imposed risks.
5. DR planning and technology evaluation and testing to achieve required RPOs and RTOs. I have participated in reaching near zero downtime Hot Site with continuous replication technology.
6. Conducted Infrastructure review and hardening on different Physical and Technical levels to achieve required confidentiality, availability and integrity requirements: (CCTV, Biometric, AAA, Strong Authentications, Firewall, IPS, SWG, Anti-malware, Anti-Ransomware, Backup and Recovery, components redundancy and FT, SEIM, Vulnerability Management, RBAC, Patching and Baseline Enforcement, HA, Encryption, SSL, Internal and Public PKI, Cloud, SaaS, …etc.)
7. Developed Incident Response Procedure facilitating detection, communication, contamination, remediation, recovery and reporting. Coordinating with national UAE CERT for notifications and alerting.
8. Conduct periodic Vulnerability Scans and pen tests. Reporting outcomes for both technical and managerial levels. Follow up and participate on remediation plans with Infrastructure and Application teams.
9. Implemented full separate Test and Dev environment to facilitate Change and Release Management procedures. Ensuring smooth and document transitions for updates and enhancements before moving to production.
10. Achieved full DC HA (Power, cooling, cabling, servers, hypervisor, OS and App clustering, RAID, mutli-pathing)
11. Conduct Security Awareness and Training sessions for end users and IT staff.

Al Foah is the leading player in the date palm industry, and is the largest date receiving and processing business in the world owned by Senaat, Abu Dhabi Government industrial arm.

Key Contributions:

1. Redesigning and Managing Active Directory Infrastructure (2008, 2008R2, 2012R2, 2016) introducing Direct Access and Windows Hello for business.
2. Design and implement Microsoft Exchange Server 2007 SP3 in a HA SCC with Cloud based SPAM management and BES,BESX integration.
3. Overcoming the company's old datacenter physical space limitation by gradual shift of all physical server workload to 100% virtual (Hyper-V2/SCVMM) and vSphere including P2V and V2V with minimal down time. That lead to triple the service capacity of the company's IT infrastructure.
4. Introduce RBAC model to key stakeholders. Setting up automated and secure user management and reporting methodologies in AD, File and Print services, Self Service, LOBs and Workflows (GPOs, Nested Groups, AD Manager Plus, AD Audit).
5. Planning and performing staged Migration from Exchange Server on premises to Office365 Enterprise cloud as one of the first organizations in the middle east.
6. Decrease Service desk calls by almost 50% by adopting and implementing secure self service solution for employees, contractors and trainees staff (ME AD Self Service).
7. Design, implement, install and document SCCM 2007, SCOM 2007 (patch management, OSD, SW distribution, baseline enforcement, monitoring performance..etc).
8. Infrastructure security hardening on different levels ( Physical, Operational and Technical) including end points Trend Micro® Office Scan (9,10 ,11) Enterprise Server (Virus Scan, Device Access Control, Anti Ransomware ...) and VMware infrastructure Trend Micro® Deep Security.
9. Supervising and participating in the company Rated-3 redundant datacenter project including the facility capacity planning ( physical location, power, smart UPS, cooling, cabling) and IT infrastructure (Cisco UCS M3 blades, FI, EMC VNX SAN with FAST, Zoning and Multipathing, Server Profile, VMware vCloud suite installation and configuration, boot from SAN, HA and DRS clusters, VM templates, Veeam backup and replication) and staged migration from the old datacenter workload with near zero downtime.
10. Achieving infrastructure high visibility, monitoring, alerting and reporting (Solarwind NPM,IPAM,NCM,Netflow,..) vROPS and AD Audit Plus for IT , application and data owners.
11. Actively participated in developing and implementing Al Foah IT Security Policies and Procedures.

ADNH owns some of the most reputable and recognizable hotels in the Emirate and beyond: The Ritz-Carlton Abu Dhabi, Grand Canal; Park Hyatt Abu Dhabi Hotel and Villas; Sheraton Abu Dhabi Hotel & Resort; Le Meridien Abu Dhabi; Hilton Abu Dhabi; Hilton Al Ain; Sofitel Dubai Jumeirah Beach.

Key Contributions:

1. Designing and Managing Active Directory Infrastructure for ADNH HQ and AL Diar Hotels across all UAE including migration from 2003 to 2008 in compliance with business and security requirements by Ministry of Tourism.
2. Implementing, administering and monitoring Microsoft Exchange Server 2007 (CCR, Message Labs,BES integration, Email address policy, Email Signature automation)
3. Managing and maintaining complete McAfee security suite from anti malware (ePO), vulnerability management (Foundstone, Hercules) ,SWG (Webwasher) for ADNH HQ and hotels.
4. Developing high and low level documentation of the full distributed infrastructure.
5. Provided 2nd level support and mentoring for ADNH IT staff.
6. Writing User Manuals and Training Sessions.

One of the leading global engineering, management, and development consulting firm in the world. My first job in the gulf region, I got a massive experience working with virtually all IT aspects and through physically and mentally demanding environment across UAE, Qatar and India offices.

Key Responsibilities:

1. Managing and Administrating Abu Dhabi Mott MacDonald Network (LAN, Switches, Arupa® Secure Wireless , Cabling, Physical installation of racks and servers).
2. Delegated to manage specific UAE AD,FIle, Print, Exchange Serve and BES.
3. Configure and monitor backup services via Symantec Backup Exec for Middle East and Indian Mott MacDonald Offices.
4. Deploy, Manage and Administer Licensing Server for the Oil and Gas Division applications.
5. Provide end user support within Servicedesk system (Altiris).

A military driven 3 years service in extreme conditions.Technology concentration with major defense contractors like Lockheed Martin and Northrop Grumman.

Key responsibilities:

1. Radar Systems Air Tracks Control.
2. Deploy Oracle Database 10g for Windows Environment.
3. Test, Operate and Manage Radar Systems Tracking Database through Oracle 10g Enterprise Manager.
4. Monitoring Database Performance and Backups.

BSc. Computer and Control Systems.

Windows Server 2003 Messaging (Exchange 2007)

Enterprise Administrator on Windows Server 2008

Datacenter Virtualization 5.1

ITIL Foundation V3

Certified Data Center Professional License 5346150.20393223

Certified Data Center Specialist CDCS

IT Infrastructure Manager

IT Manager