Security Strategy and Risk ManagementCyberSecurity Architecture

Securing the New Style of IT (Cloud, Workplace, Mobility, Data Analytics)Cybersecurity

Security Leadership: Major Enterprise Accounts, South Pacific (Australia/New Zealand)Business and Technology TransformationInnovation and Secure Business EnablementEnterprise, Solution and Capability Architecture ManagementArchitectural Advisory ServicesBusiness Driven SecurityAdvanced Persistent ThreatsManaged Security ServicesSecurity StrategyArchitectural Development (SABSA, Zachman, TOGAF)Threat ModelingArchitectural RemediationRTM and Test StrategyPrivileged Access Management SolutionsCloud Access Security Broker Architecture (CASB)Architecting NFC, SmartCard and secure RFID SolutionsSecuring Workload AutomationSIEM Integration with Workload AutomationWorkplace as a Service (WPaas)/ Mobility SecurityDLP and Endpoint ProtectionSecuring DBaaSCloud APIs SecurityTPM/Trusted Base ComputingPlatform Security

Information Security Management System (ISMS)ISO 27001 Risk AssessmentSecurity Oversight Organization-wideArchitecture Review Team (SME Security)Liaison Audit and Corporate Risk management

-- Plan, develop, maintain, and improve the Information Security Management System (ISMS) for Al Hilal Bank operating 22 Branches within UAE and 3 across Kazakhstan.-- Coordinate Information Systems Audits to Assess the effectiveness of Security Controls -- Conduct Penetration Testing and Vulnerability Assessments for Networks/Systems/Databases/Applications using variety of tools such as Back Track, McAfee Foundstone, Core Impact, Nessus, Metasploit and others -- Review and Assess Information Security Policies, Standards, Guidelines and Procedures -- Conduct Security Awareness Programs, Security Reviews and Audits -- Performed Information Risk Management and handled Incident Response Management -- Provided Administrative and Organizational support to assist the Head of Information Security and Risk Management and others within the Information Security and Risk Management Department, with such decisions -- Examine security mechanisms in the area of Systems, Network, Database and Perimeter control (Firewalls, IDS/ IPS, Proxy, etc.) -- Assess the Threats and Vulnerabilities in the above mentioned areas and provide input for Risk Register -- Ensure Network Admission Control (NAC) system for secure Network Access -- Ensure End-Point Security by protecting peripherals on Users PCs and preventing malware infections -- Monitor, Review and Audit various IT Security Systems in a heterogeneous computing environment for the Bank

-- Develop, Maintain, and Publish all corporate-level Information Security Policies, Standards, Procedures, and Guidelines, including Compliance monitoring procedures; assist in resolving security policy issues and implementing security procedures for 45 ADIB branches in UAE locally and 72 branches in ADIB-Egypt Internationally.-- Proactively ensure the Confidentiality, Integrity and Availability of information in the custody of or processed by ADIB. Lead the investigations of suspected information security misuse or in Compliance Audits/Reviews as requested by Senior Management and the Auditors (Internal/External).-- Provide technical expertise and direct the administration of security tools that control and monitor information security. Working with the ADIB Legal Department and Senior Management, to understand local and international laws with respect to encryption, privacy, and security regulations to ensure ADIB's compliance with entities such as SWIFT, Central Bank, Stock Markets (Dubai Financial Markets, Abu Dhabi Stock Market), Visa International, Abu Dhabi Islamic Financial Services (ADIFS), Reuters and British Telecom Trading Services.-- Deployed Unified Threat Management Systems (UTM) across ADIB within UAE and Egypt networks to combat security threats.-- Deployed Network Admission Control (NAC) system across ADIB for physical layer security of the network.-- Secured ADIB’s air spectrum using Air Security Systems by neutralizing rogue wireless APs.-- Integration of NAC with Wireless Access controllers across ADIB branches in UAE.-- Disaster Recovery Rehearsals to assure reliability and availability of ADIB enterprise Network using FSO, ISDN, IPVPN, and Orthogon wireless access.-- Lead an Implementation of Financial Services and Brokers’ Call Recording Systems for Central Bank Compliance and Reconciliation purposes.-- Working with leading CCTV vendors for ATM (Automated Teller Machines) remote monitoring and video recording.

-- Senior Lead Analyst in Designing, Project Management, Implementation, Commissioning and Rationalizing of Data Networks for Injazat clients.-- Part of the team that did the Security Audit/Rationalization of Injazat Clients-- Dealing with Client Delivery Executives, Service Delivery Managers on a Day-to-Day basis to identify requirements of clients.-- Following ITIL Service desk management for change management, configuration management.-- Supporting Injazat clients that include Abu Dhabi Environmental Agency, ADACH (Cultural heritage), Abu Dhabi Water Electricity Authority (ADWEA), ADSIC (Systems and Information Committee)/ E-Gov, Falcon Hospital, Naitonal Avian Research Centre, Injazat HQ, Department of Finance etc. for all their Infrastructure Security requirements-- Working with Cisco gear that includes High-End Equipment for LAN/WAN/Internet. Cisco 7500, Cisco 6500, ATM 3600, Foundry, Extreme Networks, Nortel Networks -- Stonegate Firewalls, Cisco PIX and Netscreen Firewalls.-- Cisco Intrusion Detection and Prevention Systems-- ISS Intrusion Detection Systems-- Blue Coat Cache Engines-- Cisco Content Switching Engines-- Load Balancing Services for Sun, Oracle ERP, MAXIMO server farms.-- Foundry Networks for Core and Edge Switches-- Redundant Internet Gateways and Firewall Support

--Responsible for the Design, Management and Operations of the Biggest Semiconductor Microelectronics Industry Infrastructure in the region.-- Liaison with Lucent Techologies to build one of the Biggest Technology Park in the region based on Multiservice Data, Voice, Video and P-ON (Passive Optical Networks).-- Working with Nortel Networks MultiService Switch (MSS) 7400 to provide Carrier-Class Internet Services access-- Working with Nortel Networks Core 8600 Switch for LAN (8010co) to provide resilient, fault-tolerant Enterprise LAN access.-- Providing Enterprise-class security for the tenants based on Juniper Networks NetScreen-5200, Nortel Contivity boxes and Proventia ISS.-- Providing Enterprise class VoIP solution using Succession 1000 Communication servers.

--Responsible for the Core E-Government Network and Security Infrastructure of the Leading E-services outlet in the Middle East. --Supporting a farm of more than 20 Appliance firewalls including Cisco PIX, NetScreen, SunScreen, FortiNet both in Route/NAT and Stealth modes and more than 40 Host-Based Firewalls for the UNIX server Farm.--Accomplished THE FIRST and most rigorous testing of the FortiNet line of firewalls in the UAE.--Testing and feasibility study of SSL-Based VPN solutions for DM using Neoteris(Juniper) and Aventail.--Establishment of complex network setup between the Dubai Government Department entities using IPSec VPN technologies.--Working with Dubai Government entity GIN (Government Information Network) to design and integrate one of the most complex inter-governmental setups in UAE.--Communicating with other Dubai Government entities like DED, Dubai Ports Authority, H.H. Rulers’ Court, Dubai Police, Dubai International Airport, Dubai Immigration(DNRD), DoHMS, Dubai Internet City and Dubai E-Government.--Design, Enhancing and Maintaining an infrastructure that provides multitudes of E-services to the City Of Dubai.--Supporting one of the most complicated Portal services in the Middle East involving Layer 2-Layer 7 technologies.--Responsible for the complete support of Extreme Networks Summit, Alpine series of switches using VRRP, 802.1q etc.--Responsible for the complete support of Alteon Load Balancers (VSRs, VRRP, VRs etc.) .--Responsible for the Internet Gateway for the Dubai Municipality Enterprise Network and Antivirus Gateways and Anti-SPAM based on IronPort.--Supporting the caching farm of Network Appliance NetCaches (C3100s and C1100s) for Internet needs of Dubai Municipality.--Maintaining and re-routing traffic through multiple uplinks to the Internet for resiliency.

--Working in the Capacity of Network Engineer to facilitate the Design, Development and Support of IT Infrastructure of the Company.--Design Development and support of the ADWEA and BPC Server Farm for critical ERPs based on Solaris 8 and Clustered Windows 2000 machines.-- Complete end-to-end development of the LAN/WAN, Data services for the Company based on Extreme Networks Black Diamond 6808 Summit Layer2/3 Edge switches with inferno chipset and Cisco Systems ATM, Leased Line and ISDN Routers.--Member of a team that developed the State of The Art Data Center for ADWEA (Abu Dhabi Water Electricity Authority)--Designed and Implemented the security infrastructure for ADWEA, BPC and other Group companies based on Cisco Secure PIX 525 Firewall and Cisco Intrusion Detection IDS 4200 Series.-- Responsible for the complete support of Gigabit, ATM, ISDN, Leased Lines and Ethernet based networks for the whole Company.-- Designed, Implemented and Tested as a team member the complete ATM backbone for the Abu Dhabi Water and Electricity Authority (ADWEA) Group Companies that covers 80% area of the country (UAE).-- Preparation of all the Tenders, technical specifications and BOQs for the development and expansion of the LAN/WAN Infrastructure.-- Handled the Tendering Process for Projects and Developed and Designed Infrastructure and BOQs for the following companies Umm Al Nar Power Company, Al Wathba Power Company, Taweelah Power Company, Al-Ain Distribution Company.-- Testing & Evaluation of Enterprise Network Equipment.-- Project Management and Capacity Planning. -- Effective Bandwidth Management and Quality of Service for High Availability of ERP applications.-- Extensive experience with Cisco Systems, Extreme Networkss, Sitara Networks, Nokia Firewall and Intrusion Detection Systems.-- Documentation of the entire Enterprise Network.

--Directly responsible for constructing, developing and supervising an industry leading technical operations team and implementing all current (Network Operations Center) NOC procedures -- Design, Installation, Support and Troubleshooting Wide Area Networks (WAN)(Internet/Intranet), Local Area Networks (LANs), Structured Cabling --ATM Networks (LANE/MPOA)--Design and Implementation of Frame Relay WANs.--Project Management and Capacity Planning--Recruiting, training, staffing 24x7 NOC--Testing & Evaluation of Network Hardware and Communications Software against (Request For Proposals) RFPs. --Performance Tuning and Quality Control against SLAs.--High level Network and System Design TCP/IP Subnetted Networks, (ATM LANE/MPOA), Wide Area Network OSPF/BGPv4, VLSM, CIDR blocks, High Availability Systems, RADIUS Servers, Sun Network and Storage Arrays--Firewall Setup and Design based on AltaVista Firewall 98 and Cisco IOS Firewall Feature Set--Administration of local UNIX (SGI/Solaris) clusters and NT systems.--Developing Document Imaging Solutions using Watermark/IMS/SAROSServices performed for: City of Jacksonville, Alachua County, City of Ocoee, Bridgeport Alliance, Leading Internet Service Providers in Central Florida (IAG, GDI, MPInet)

--TCP/IP based Intranet/Internet (Apache, SUN, SGI) Design and Implementation. Ethernet and IEEE 802.x Support --Configuration and installation of Cisco 25xx, 4xxx, 7xxx series routers for WAN (Wide Area Network) links--Configuration and installation of Cisco Catalyst 19xx, 28xx, 5xxx switches for LAN (Local Area Networks)--Large scale deployment of Cisco AS5xxx Access Servers, Ascend MAX/TNT/Pipeline and Annex Xylogics equipment for remote customer connectivity.--Configuration of Cisco IOS Firewall Feature Set--Configuration and installation of Windows NT and Enterprise SUN servers (using SUN Storage Arrays) for Local and Wide Area Networks--Clustering/High-Availability solutions, RAID configuration, performance tuning.--UNIX System Administrator for Orlando Site (Permanent) (Setup of NFS/AUTOMOUNTER filesystems, NIS+ maps, Sendmail and DHCP)--Direct accountability of all day-to-day technical operations--Cabling and other BMS infrastructure support--End-to-end design of UNIX server farm infrastructure--Services performed for: Brevard Community College, Polk Community College, AT&T (Lucent Technologies), CNL, Miami International Airport

--Directly responsible for the Department Of Engineering UNIX Local Area Network of 150 Nodes.--Responsible for Installation and Maintenance of UNIX-based nodes comprising of Sparc 20/10/5s, and Digital UNIX (Alpha) based Systems.--Cabling and other BMS infrastructure support--Duties included overseeing Network Operations, setup of NFS filesystems, NIS+ domains, Mail Services, Back-ups, Hardware and Engineering Software installation, Patching of OS, and User Support.

--Helping Clients in Cabling & Network Topology Design (Layout of Cables, Riser backbone systems).--Responsible for assisting local clients in the setup, maintenance and provisioning of Network facilities (Printers, Scanners, Plotters).--Meeting the demands of customers for network connectivity equipment (Ethernet Hubs, Network Interface cards, Windows/Novell Software.)