Rami Mahmoud

• Planned , designed , built and operated three Enterprise Architect offices for customers in GCC , with the participation of a team of architects (Technology, Business, Application & Data) as: Zakat, Tax and Customs Authority (ZATCA), Saudi Irrigation Organization (SIO) in KSA and Supreme Judiciary Council (SJC) in Qatar
• Created, reviewed and updated all technology documents (landscapes, reference model, technology catalogue) within the authority of EA office for each customer
• Determined the findings / gaps related to technology layer and developed the road map for the EA office for all layers (Business, Data, Application Technology and Cybersecurity)
• Prepared Cloud Migration Strategy for SIO customer, to be used as a guideline for their cloud adoption project
• Participate in conducting maturity assessment of EA office for each customer
• Configured the EA office tool according to technology architecture artifacts and deliverables
• Collected all information produced during the establishment phase of EA office on each customer site in the EA tool
• Generated all reports will be needed for obtaining the certificate of compliance for the Governance Authority of each customer
• Operated the EA office for each customer and updated the artifacts related to technology domain in coordination with EA team members in each customer's organization to preserve EA office information and details .

As a freelance cloud solutions architect, I was brought in for more than one organization in Amman to assess their current infrastructure, identify pain points, and design a cloud migration strategy that would support the growth for them.

• The Process included: Conduct a thorough analysis of their existing infrastructure, applications and data.
• Met key stakeholders to understand their business, goals, technical requirements, and budget constraints.
• Designed a cloud migration plan (based on previous assessment) that leveraged the scalability and flexibility of a major cloud provider.

• Assessed the security risks associated with cloud network devices and ensure their compliance with SWIFT CSP & other security standards as: ISO 27K, GDPR & NIST.
• Set up & designed new IP schema for Migrating EastNets US PRI & DR sites (On-Prem) to Azure.
• Designed and architected cloud network and security solutions based on SWIFT CSP standards, regulations & client requirements.
• Designed & built new Cloud Computing model for EastNets Service Bureau consisting of new PA FW/VPNs, Juniper SRXs, Ivanti SSL VPNs including Network monitoring & Security Tools.
• Participated in developing and implementing security incident response plans to address security breaches, network outages, and investigating & resolving critical incidents promptly.
• Applied & configured security controls and measures needed to protect identity & access, data, applications, and networks.
• Configured MS defender for all EastNets resources: Storage, Databases, App Services over Azure Network environment.
• Configured data connectors in Microsoft Sentinel to collect and aggregate security data from various sources in EastNets environment over Azure cloud.
• Created and customized analytics rules in Microsoft Sentinel to detect specific security threats and anomalies.
• Implemented security controls & measures for the new cloud environments as: threat protection, identity and access management/IAM using Azure & AWS technologies & services.

• Configured and troubleshooted network security devices: NGFW/VPN (PA, Cisco, Juniper), Juniper IPS, Cisco ISE and FMC for EastNets on-prem Data centers.
• Processed new change requests /CRs for Configuring new VLANs, DMZs, Routing, firewall policies and publishing new services when needed.
• Configured & troubleshooted new S2S VPN connections on VPN devices existing at remote customer sites.
• Discussed & approved new CRs for Configuring routing and switching security (Port Security, ISE, ACL, and VLAN filter, DHCP-Snooping, EIGRP Authentication and DMVPN).
• Enhanced and tuned network performance by configuring QoS, FHRP, HSRP, policy-based routing (BPR), Port-Aggregation, IP-SLA on the required NW & Security devices.
• Participated in configuring and troubleshooting EastNets new Data centers based on Spine-Leaf Architecture by Cisco SDN (ACI) using APIC controllers.
• Created and configured Palo Alto Enterprise Data Loss Prevention (E-DLP) data patterns and filtering profiles to prevent accidental data misuse, loss, or theft.
• Participated in preparing Security Hardening Template for all security devices & servers installed on all EastNets sites.
• Participated in preparing and publishing EastNets new VPN connectivity Troubleshooting Guide.

• Participated in upgrading EMC RSA Authentication server in for EastNets DR site from 6.1 up to 8.1 then to 9.0.
• Designed & Built virtual Data Center for EastNets DR site based on VMware server, Vsphere Client4.0 & Web Client applications.
• Participated in Preparing EastNets VPN connectivity Troubleshooting Guide.
• Participated in preparing Security Hardening Template for all security devices & servers installed on all EastNets sites.
• Provided the needed answers for external Vulnerability & Penetration test reports carried out by 3rd party security auditors.

• Participated in setting up the designs for the last-mile solutions
• compatible with backbone networks for ISPs as: Orange JO, Zain &
• Umniah (Formerly Batelco).
• Installed & configured OneAccess routers as a POC for the customers.
• Provided 1st & 2nd level of technical support to customers /ISPs: as Orange JO, Zain & Umniah over phone calls or/and using support forums tickets.
• Provided 3rd level of support to Orange JO engineers & helping them with OneAccess devices configuration.
• Installed, configured & troubleshooted NW devices as: Cisco Routers & Switches.
• Installed, configured & troubleshooted security devices as: Juniper SSG, Cisco ASA, Symantec DLPs & Blue Coat (Proxy SG & Cash Engine) on the customer sites.
• Participated in configuring & commissioning Kulacom Wi-Max ISP sites.

• Installed & configured Core ATM SPS & MPS switches (New Bridge).
• Installed & configured DSLAMs & (IP-based) DSLAMs (Alcatel-Lucent.
• Configured last mile CPE (routers & modems) using NW tools & utilities
  embedded within ATM Network Management System machine.
• Troubleshooted digital services lines (Physical Layer) using specific
  testing & diagnosing tools.
• Prepared & tested IMMSP platform to provide Triple Play services (ADSL,
  Video on-Demand (VoD), Audio (VoIP) over Fiber cables (FTTH, FTTO,FTTC) as a last mile connectivity.