Amr Afify

Amr Afify

الجيزة أكتوبر 6 مصر
٢ ألف متابع أكثر من 500 زميل

نبذة عني

Experienced Cyber Security Manager with a professional experienced with shiny history…

الإسهامات

النشاط

انضم الآن لعرض كل النشاط

الخبرة

  • رسم بياني Orange Cyberdefense
  • -

    Egypt

  • -

    Cairo Governorate, Egypt

  • -

    Cairo Governorate, Egypt

  • -

    Cairo Governorate, Egypt

  • -

    Cairo Governorate, Egypt

  • -

    Cairo Governorate, Egypt

التعليم

  • B.Sc. of Information System and Management, Modern Madina Academy, Cairo Egypt.

التراخيص والشهادات

الدورات التعليمية

  • AWS Certified Cloud Solutions Architect – Professional

    -

  • AWS Certified Cloud Solutions Architect –Associate

    -

  • Certified Ethical hacking (CEH)

    -

  • Certified Information System Security Professional(CISSP)

    -

  • Cisco Certified Data Center Associate (CCNA Datacenter)

    -

  • Cisco Certified Data Center Professional (CCNP Datacenter)

    -

  • Cisco Certified Design Associate (CCDA)

    -

  • Cisco Certified Network Associate Security (CCNA Security)

    -

  • Cisco Certified Network Professional Security (CCNP Security)

    -

  • Cisco Certified Network Professional Voice (CCNP Voice)

    -

  • Cyberoam Certified Network & Security Professional (CCNSP)

    -

  • ITILv3

    -

  • Leadership Skills and People Management

    -

  • Linux +

    -

  • Microsoft Azure Cloud Administrator

    -

  • Microsoft Data Protection Manager (DPM)

    -

  • Microsoft Exchange 2013 installing and configuring

    -

  • Microsoft MCSE 2008

    -

  • Microsoft MCSE for windows 2012

    -

  • Microsoft SQL server 2012

    -

  • Microsoft exchange 2010 Installing and configuring

    -

  • NetApp Certified Storage Associate (NCSA)

    -

  • Project Management professional (PMP)

    -

  • Red Hat Certified System Administrator (RHCSA)

    -

  • Red Hat Certified System Engineer (RHCSE)

    -

  • SharePoint 2013 Administration

    -

  • Symantec Backup Exec

    -

  • Time Management & life control

    -

  • VMware Certified Associate

    -

  • VMware Certified Professional - Data Center Virtualization

    -

  • VMware Certified Professional - Network Virtualization - NSX

    -

  • VMware Certified Professional VSphere 5.5 , 6.x

    -

المشروعات

  • Secure By Design - Ongoing project -replace leagcy Switches & APs with high end FortiSwithces & FortiAccessPoint & adding PaloAlto As DC firewall and F5 WAF

    -

    Project Description: To replace legacy switches & APs with high end and highly available switches to prepare to implement NAC & SIEM Solution


    •Secure By Design -Ongoing project -replace legacy Switches & APs with high end FortiSwithces & FortiAccessPoint & adding PaloAlto As DC firewall and F5 WAF
    •Communicate partners & vendors
    •As well IP Schema change to meet new secure design.

  • Migrating and Implementing HA Active-Active Perimeter- Data Center firewall clusters and Mail security Gateway with centralized logging solution – Project across all 3 datacenters. FortiGate – FortiMail - FortiAnalyzer -SandBoxing.

    -

    Project description: Manage to migrate low capacity firewalls to FortiGate products with new design depends on HA Active-Active Clusters across all 3 date centers to avoid single point of failure and increase the service availability to critical business application (SAP, Exchange) also to enhance the security and network visibility as well use sandboxing technology and Mail Security Gatway

    • Manage the migration and implementation HA active – Active cluster firewalls
    • Implement…

    Project description: Manage to migrate low capacity firewalls to FortiGate products with new design depends on HA Active-Active Clusters across all 3 date centers to avoid single point of failure and increase the service availability to critical business application (SAP, Exchange) also to enhance the security and network visibility as well use sandboxing technology and Mail Security Gatway

    • Manage the migration and implementation HA active – Active cluster firewalls
    • Implement SD-WAN technology with failover and Load balance for internet links and MPLS between sites to provide maximum uptime over the network.
    • Appling needed Qos for Voip , Exchange , SAP traffic across sites
    • Provide a secure VPN access for the datacenter services and remote worker users to apply work-from-anywhere (WFA) strategy due to covid-19.
    • Provide 2 layers of scanning, IPS, AV by implementing ForiMail secure gateway to our Exchange nodes and sandboxing.
    • Implementing centralized logging and reporting solution with archiving storage for all HA Clusters, FortiMail by implementing fortiAnalyzer.
    • Building management plane with tiering for different teams (Network security team and Infrastructure admins L1, L2 support).
    • Project increased the productivity & Security as well minimized the downtime.

  • Manage implementing Kaspersky EDR Project (Endpoint detection and response) and Vulnerability management patching for all endpoints and servers +600.

    -

    Project description: Manage to implement one of robust EDR products which is Kaspersky EDR for all endpoints and servers to improve the security and visibility as well adding additional layer of security

    • Communicate vendor and get best price from suppliers.
    • Manage to set plans.
    • Manage the UAT and tests before launching to avoid the impact the operation.
    • Manage the deployment with IT Infrastructure Admins Team L1, L2 support.
    • Server configured and license activated…

    Project description: Manage to implement one of robust EDR products which is Kaspersky EDR for all endpoints and servers to improve the security and visibility as well adding additional layer of security

    • Communicate vendor and get best price from suppliers.
    • Manage to set plans.
    • Manage the UAT and tests before launching to avoid the impact the operation.
    • Manage the deployment with IT Infrastructure Admins Team L1, L2 support.
    • Server configured and license activated on each server per site and automatic installation task created to be pushed on laptops, desktops, and servers.
    • Made sure that all endpoints have EDR agent installed with applied configuration.
    • Fix all issues that raised while running the project.
    • Keep monitors threats and alarms for endpoints which increased the visibility.
    • Project successfully added additional layer of security to protect user’s data, and critical business server’s data to ensure data integrity.

  • Infrastructure WAN High availability and failover for 3 datacenters (Internet - VPN) - (Pre-WiMAX - Microwave- MSAN) and Implement Secure SD-WAN Technology – Project

    -

    Project description: Add secondary ISP include both services (Internet - VPN) for all our datacenters across the 3 sites to increase the high availability for SAP HANA application and exchange mail system.
    • Manage to contract, negotiate for new connections with vendor.
    • Manage, coordinate, facilitate site survey for all sites.
    • Manage, coordinate, facilitate installing (Pre-WiMAX - Microwave- MSAN) across datacenters.
    • Manage installing ISP routers, switches, modems to our…

    Project description: Add secondary ISP include both services (Internet - VPN) for all our datacenters across the 3 sites to increase the high availability for SAP HANA application and exchange mail system.
    • Manage to contract, negotiate for new connections with vendor.
    • Manage, coordinate, facilitate site survey for all sites.
    • Manage, coordinate, facilitate installing (Pre-WiMAX - Microwave- MSAN) across datacenters.
    • Manage installing ISP routers, switches, modems to our internal network.
    • Manage to connect, configure our datacenter firewalls with both new (Internet and VPN) connections.
    • Manage to test 4G backup solution operation across all sites with ISP.
    • Manage to configure failover to both ISPs on our firewalls.
    • Project increased the productivity almost 40% and minimized the downtime to max.

  • Building new Datacenter and Move HQ site to new site location - Project

    -

    Project description: Manage build new datacenter from scratch, manage building new site infrastructure then move running current data center for ZeinaGroup HQ site which was consisted of 6 floors almost 300 users includes all related IT stuff (Datacenter, Laptops, Workstations, Printers, Scanners, etc.)
    • Set plans, review, carry them on, coordinate with vendors during the project.
    • Manage to build new Data center, cabling, Fiber,faceplates, raised floor, racks, PDUs, Fan units, UPS…

    Project description: Manage build new datacenter from scratch, manage building new site infrastructure then move running current data center for ZeinaGroup HQ site which was consisted of 6 floors almost 300 users includes all related IT stuff (Datacenter, Laptops, Workstations, Printers, Scanners, etc.)
    • Set plans, review, carry them on, coordinate with vendors during the project.
    • Manage to build new Data center, cabling, Fiber,faceplates, raised floor, racks, PDUs, Fan units, UPS system, cooling system, firing system, access control system to cover the 300 users.
    • Supervise implementation turn style gates ZTK and fingerprints.
    • Manage to implement, configure new core switches, access switches and configure planned VLANs (Data, Voice, IPTV, CAMs, Management, etc.)
    • Manage to implement, configure new wireless network HP Aruba based on layouts plans test coverage, roaming through virtual controller.
    • Manage to implement Video Surveillance CAMs and NVR.
    • Manage to implement video conference solution MAXHUB in HQ and remote factories includes training top management and other managers.
    • Supervise Smart TVs implementations across all meeting rooms, boardrooms, and manager rooms.
    • Manage to simulate and build same as virtual environments on new site as current running environment.
    • Manage tests plans, to validate the functionality of new networks implemented with current running virtual environment, configurations, etc.
    • Announce, coordinate with top management, HR department, other departments on the movement date and time.
    • Manage to move the whole IT stuff (Servers, Laptops, Workstations, Printers, Scanners, etc.) to new site with zero downtime after test plans was succeeded.
    • Follow up and presence on floor with support team on launching date to ensure that all requests are facilitated.

  • Move hotline to new HQ site and implement new VOIP, IP telephony solution- Project

    -

    Project description: Move hotline (19518) and replace legacy telephony system with VOIP, IP Telephony solution on new HQ site
    • Check, collect data related to old legacy system and current hotline.
    • Coordinate, setup meetings to identify the project scope, requirements, etc.
    • Set, prepare dialing plans for all departments, call routing, welcome messages, etc. to be implemented on new system
    • Manage purchase, implement, configure new UCMs (Unified Call Managers) with SIP trunks on…

    Project description: Move hotline (19518) and replace legacy telephony system with VOIP, IP Telephony solution on new HQ site
    • Check, collect data related to old legacy system and current hotline.
    • Coordinate, setup meetings to identify the project scope, requirements, etc.
    • Set, prepare dialing plans for all departments, call routing, welcome messages, etc. to be implemented on new system
    • Manage purchase, implement, configure new UCMs (Unified Call Managers) with SIP trunks on sites.
    • Manage to contract new lines and set moving date to move our hotlines to new lines.
    • Manage to extend cables for new contracted landlines to our datacenter, patch panels, etc. with vendor and connect it to FXO ports.
    • Manage the cutover from current CO (central office) to new CO to move hotline and setup call queues and call routing for customer services agents.
    • Manage to deploy new IP telephony with the team on new HQ site.
    • Manage to deploy wireless base station and configure wireless phones for top management and board members.
    • Manage to deploy configure GSM gateways for mobile uses.
    • Setup training sessions for how to use new IP telephony system with features call forward, meeting, pickup calls, transfer, etc.

  • Manage to implement ManageEngine Ticketing system and Asset management system – Project

    -

    Project description: Manage to implement ManageEngine Ticketing system for 3 IT teams (Infrastructure – SAP – Sales Buzz) and deploy Asset Management system to have accurate inventory and full visibility for all IT hardware equipment’s (Laptops – Desktops, Servers, Access Points, Switches, Routers, Firewalls)

    Plan and design the system dispatching the ticketing based on specific groups for each team with specific categories as outcome of the previous meeting.
    • Collect all pervious…

    Project description: Manage to implement ManageEngine Ticketing system for 3 IT teams (Infrastructure – SAP – Sales Buzz) and deploy Asset Management system to have accurate inventory and full visibility for all IT hardware equipment’s (Laptops – Desktops, Servers, Access Points, Switches, Routers, Firewalls)

    Plan and design the system dispatching the ticketing based on specific groups for each team with specific categories as outcome of the previous meeting.
    • Collect all pervious repeated requests, problems and insert it into the categories to ticketing system.
    • Manage with the team to created needed docs for users and guide.
    • Manage to deploy the asset management system and to let team to deploy the Asset explorer agent on all workstation, laptops, etc.

  • Securing Infrastructure & Hardening Environment - Project

    -

    Project description: Due to some security issues planned to provide secure connections.
    • Review all firewall configurations and adjust all needed setting.
    • Setup redundant IPsec VPN tunnels to permit secure access to the application servers from outside the company in addition to grant co-workers secure access to our network.
    • Review all Kaspersky AV server configuration and setup new policy .
    • Review all AD GPOs and create/adjust new GPOs to secure our servers and windows…

    Project description: Due to some security issues planned to provide secure connections.
    • Review all firewall configurations and adjust all needed setting.
    • Setup redundant IPsec VPN tunnels to permit secure access to the application servers from outside the company in addition to grant co-workers secure access to our network.
    • Review all Kaspersky AV server configuration and setup new policy .
    • Review all AD GPOs and create/adjust new GPOs to secure our servers and windows clients.

  • Cloud Office365 Mail Migration from Zimbra Linux Mail Server - Project

    -

    Project description: This project is planned due to old email system instability, security issues that were effect the business badly.

  • Participate in Symantec PGP Data Encryption deployment for 2 Cairo Site+1400 clients and MFA Symantec VIP Secure Authentication Anywhere two-step authentication- Project

    -

    Participate in Symantec PGP Data Encryption deployment for 2 Cairo Site+1400 clients and MFA Symantec VIP Secure Authentication Anywhere two-step authentication- Project

  • Participating in Global Convergys EDR (Engineering Design review) project - (Convergys)

    -

    Project description : as Deputy Engineer for EMEA region for reviewing all new upcoming integrations systems/implementation/current issues with global IT directors more than 20 participants joining the weekly meeting representing 32 countries by coordinate, fix, sync with all affected sites all upcoming changes.

  • HQ Enhancing Routing Capabilities & Security – Project (IMHOLDING)

    -

    Project description: Due to overload in HQ core router resources all routing for HQ subnets have been moved to MLS Core switch.
    • New design has been made to reduce core router resources since core router was handling Voice, Video, application server’s data for all 9 remote sites.
    • Move All HQ VLANs subnets from core router interfaces to core-switch.
    • Changing all subnets gateways to core-switch instead.
    • Successfully checked reachability and fix all reported issues.
    •Applying…

    Project description: Due to overload in HQ core router resources all routing for HQ subnets have been moved to MLS Core switch.
    • New design has been made to reduce core router resources since core router was handling Voice, Video, application server’s data for all 9 remote sites.
    • Move All HQ VLANs subnets from core router interfaces to core-switch.
    • Changing all subnets gateways to core-switch instead.
    • Successfully checked reachability and fix all reported issues.
    •Applying All ACLs required for security.
    • Performance enhanced 60%.

  • Migrating all DCs - Project

    -

    Project description: Migrate legacy servers and Implement new servers on 3 sites.
    • Migrate HQ PDC to new server with zero downtime and installed ADD-DC.
    • Implement DCs and ADD-DC, FS servers across company sites with zero downtime with help of 2 team members.
    • Have been awarded a certificate of appreciation regarding that project by CEO.

المزيد من أنشطة Amr

عرض ملف Amr الشخصي الكامل

  • مشاهدة الأشخاص المشتركين الذين تعرفهم
  • تقديم تعارف
  • تواصل مع Amr مباشرة
انضم لعرض الملف الشخصي الكامل

ملفات شخصية أخرى مشابهة

أعضاء آخرون يحملون اسم ⁦⁩Amr Afify⁦⁩ في ⁦⁩مصر

اكتسب مهارات جديدة من خلال هذه المواد الدراسية