hassan mohamed

Lead a team of 4 network security engineers building and operating a hyperscalable network delivered entirely as Infrastructure as Code, under ISO 27001, NIS2 and KRITIS. Own security architecture for Palo Alto firewalls, Infoblox DDI, and JFrog Artifactory/Xray, and run security platforms on Kubernetes with HashiCorp Vault.

Reviewed and approved security designs (HLD/LLD) against Shell architecture standards and Zero Trust principles.

Designed and rolled out the company-wide cybersecurity programme and security policy framework based on ISO 27001, NIST and CIS. Deployed Palo Alto NGFW, Panorama log collectors and Cortex XDR worldwide, with User-ID, SSL decryption, DNS security and ZTNA/SASE.

L3 engineering across the bank's global data centres: Check Point, Palo Alto, Cisco ASA, Akamai anti-DDoS, Zscaler, Infoblox, ClearPass; SIEM on Splunk and ArcSight; automation in Python. Managed the full vulnerability lifecycle and introduced new detection processes.

Designed and deployed a new data centre in Shanghai and led an active-active DC migration (Nexus 9K, BGP multihoming, ASA multi-context, Palo Alto). Rolled out Rapid7 Nexpose vulnerability scanning worldwide and administered Cisco ACI with L4–L7 service integration and ISE.

Led Check Point professional services for the Spanish partner channel, working directly with the vendor's local team; L3 escalation for the Westcon SOC and on-site engineers. Delivered VSX, Nokia IPSO and Crossbeam XOS deployments, and ScreenOS-to-SRX migrations.

L3 escalation and project delivery for 400+ enterprise customers, including IBEX 35 companies, across 200+ security technologies. Designed and deployed a VSX R77.10 cluster on 13500 appliances with MDM for an energy-sector customer, including CoreXL/SecureXL performance tuning.

Migrated an 8,000-rule Netscreen estate to Check Point VSX on Crossbeam, parsing objects and rules with Perl and Bash. Consolidated two Vodafone Check Point clusters into a single 21400 HA cluster and one merged policy, resolving conflicts and overlaps with 10,000+ lines of Perl.

Built the network and security layer of Indra Cloud Computing from design to production: Nexus 7K/5K/2K, Check Point VSX, Cisco ACE, ASA 5585. Migrated Mapfre's Check Point cluster from Nokia IPSO to Power-1 in HA; deployed F5 BIG-IP LTM pairs for Carrefour and Catalyst 6509-E cores for TDE.

Sole owner of network and security projects in Enagás' critical data centres: PIX-to-ASA migration with policy clean-up, multihomed corporate DMZ, HP-to-F5 load-balancer migration, Juniper IDP deployment. Designed LAN, WAN and WLAN for a new 200-user headquarters; wrote hardening guides and operating procedures for SOX compliance.

High-level support for the utility's data centres: Check Point on Nokia IPSO, Juniper SSG, SSL-VPN, Cisco ACS, RSA tokens, Windows PKI, F5 BIG-IP, Catalyst 6500 and MDS SAN. Ran perimeter antivirus, ISS Proventia IDS with SiteProtector and vulnerability scanning; built botnet and malware detection by correlating firewall, IDS, proxy and SMTP logs.

Member of the NMSC team supporting customers in England and Ireland across Capgemini's core infrastructure: Check Point on Nokia, Crossbeam VSX, CyberGuard, Cisco PIX, VPN 3000, CSS load balancers, MPLS VPN access via BT and France Telecom.

Managed corporate security policy, VPNs and NAT on Check Point Firewall-1 over Nokia IPSO; remote access over Cisco VPN 3000, GPRS and UMTS; Catalyst 6500 routing and switching.

Supported the WAN of all La Caixa branches and ATMs; took part in the Alcatel 4400 ToIP roll-out and the migration from Frame Relay/ATM to MPLS VPN. Configured Cisco, Juniper, Teldat, Nortel and Riverstone equipment; monitoring with NetCool and HP OpenView.

Trainer for LPIC-1, CCNA Security, CCNA R&S, F5 BIG-IP LTM and Radware Alteon; embedded firmware for Microchip PIC18 controllers (Tecnocat SL).

Pursuing a Bachelor of Science in Computational Mathematics, currently in the third year.

Completed a higher-level training cycle in Computer Science and Telecommunications.