Sameh Attia

Experience

• 

  United OFOQ

  Aug 1997 - Jan 1998

  Systems Engineer

  • Designed and implemented an AS/400 ODBC Arabic-translation DLL in C. Responsible for the overall product design, including the user interface of its control panel program to change settings on the fly.

• 

  Internet Egypt

  Jan 1998 - Jan 2000

  Technical Support Engineer

  • Instructed C and Java languages.• Troubleshooted customers’ dial up problems on phone or on site.• Configured LAN modems, Analogue / ISDN modems, proxy servers, and firewalls.

• 

  Egyptian Army, Central Shooting Range for Missiles and Ammo Testing

  Jul 1998 - Dec 2000

  Lieutenant Engineer

  • Setup and operation of a high-speed video tracking system from Mil-Spec, USA and Hadland, UK.• Brought focus on use of computer-aided applications, trained personnel, and developed a monthly pay-roll sheet.

• 

  MenaNet Communications

  Jan 2000 - Apr 2001

  Technical Support Engineer

  • Troubleshooted customers’ dial up problems on phone or on site.• Configured LAN modems, Analogue / ISDN modems, proxy servers, and firewalls.

• 

  TE Data

  Apr 2001 - Nov 2008

  • Managed 4 teams, 26+ members, of IT Operations, Information Security, Infrastructure, and Call Center.• Initiation of new building in Pyramids Heights project. A 1300+ nodes LAN and a 150m2 data center.• Initiation of Oracle's Enterprise Business Suite (EBS), and Alcatel-Lucent's Motive Total Broadband Care (TBC) projects.• Run a new branch with 150+ employees over WiFi, 802.1x, and PEAP over WiMax load balanced with copper link.• Deployed the corporate's budgeting and project management system.• Deployed a wired roaming facility for HQ employees using 802.1x with RADIUS, PEAP, and ADS credentials.• Deployed WiFi access for HQ with 802.1x and PEAP with MSCHAPv2 and MS' ADS credentials. Show less • Run and supervised a GRE tunnel between HQ's IP PBX and 5+ access servers for PBX off-loading.• Run and secured 30+ point-of-sales joint-venture project with TE's exchanges, and Olympic Group's B-Tech.• Deployed an IPSec VPN platform with PSK keys in a site-to-site setup for use with vendors and other corporates.• Deployed a transparent anti spam/virus SMTP gateway with false-positives near zero, detection accuracy ~ 99%.• Deployed an open-standard XMPP/Jabber IM system with Yahoo, MSN, GTalk, soft phones, white board, and audio/video conferencing support.• Secured and deployed RDBMS replication system used with ADSL configuration management solution for customers.• Secured the customers' ADSL configuration and redirection project.• Run and secured a push email service for top management with security and IT policy.• Improved voice quality by creating multiple voice VLANs instead of the common single-voice-VLAN deployments.• Deployed an explicit pass-through web content filter with categorization which greatly raised the security level.• Deployed a password notifier through email for employees outside the premises with a URL for changing password.• Deployed and secured the queuing system running in 30+ CSOs serving 150+ agents.• Secured the attendance system using RFID cards, and bio-authentication finger printing with SQL back end.• Secured the in-house billing system running on Apache, Tomcat, PHP, .NET, Java, MSSQL, PostgreSQL, and MySQL. Show less • Initiated the establishment of the Information Security and MIS' data center with latest security measures.• Secured the initial VoIP call center. A Windows based VoIP PBX and call center.• Deployed corporate SSL/TLS VPN with X.509 certificates and MS' ADS credentials.• Integrated all 7 branches, and 20 CSOs over a solid SSL/TLS VPN.• Secured Oracle's Financial and HR applications, and IBM's Tivoli management and monitoring systems.• Secured MS' network which is composed of ADS DCs, SMS, WSUS, SPS, and Exchange 2003.• Secured ART's VoD, and FIFA '06 world cup. A DRM streaming setup of the streaming master, and the license servers.• Built an automatically detectable explicit web proxy based on WPAD facility and DHCP option 252.• Secured the credit card gateway for e-payment through Banque Misr's e-payment gateway.• Deployed a DNS proxy as an acceleration and isolation layer between clients, local DNS, and Internet DNS servers.• Deployed RIP v2 protocol among 5 gateways using Multicast with source authenticity using MD5 digests.• Deployed several LAN security measures which ranged from port security to storm controls.• Deployed MS' Exchange 2003 and OWA using NLB, and SAN storage for back end servers with firewall in between.• Secured Cisco's IPT, and Avaya's IPT and CCE which is distributed among HQ, 7 branches, and 30+ CSOs.• Deployed a L7 P2P traffic filter. This increased the protection level and also reduced international bandwidth consumption.• Segregated traffic of different departments and divisions using IEEE 802.1q VLAN separation.• Automated Cisco and Avaya's voice VLAN assignment with DHCP. Also deployed PXE server for RHEL installations. Show less • Designed and deployed Vodafone's SkyPass, a joint project, authentication and billing system with gateway type auto-sensing.• Deployed webmail sites of Seven7s, TE, and TE Data and also hacked its LDAP queries to 1 per session for better performance.• Developed a reporting system for traffic usage per exchange which helped too much with better distribution of access servers.• Developed a prepaid billing plugin for SkyPass in Cairo ICT 2004 and 2005 to disconnect customers when no credit.• Deployed the Egyptian Meteorological's authority qmail-ldap server with a local LDAP directory plus training.• Deployed Gomhuria's Thanawya A'amma results as a clustered and highly-available website on years 2002 to 2004. Show less • Deployed and administered the ADSL resellers' forum.• Developed tools in C with shell scripts' wrappers for daily system administration with staff training.• Developed scripts for analyzing and reporting accounting information from the RADIUS servers.• Developed an LDAP replication using OpenLDAP which consisted of both an LDAP master and a slave.• Deployed email system of Free Internet project on Jan 2002. Migrated from Sendmail to qmail-ldap with maildir support.• Configured several Linux servers like Sendmail, qmail, NTP, Apache, BIND, MRTG, MySQL, LDAP, and freeRADIUS. Show less

  • MIS Manager

    Mar 2008 - Nov 2008

  • MIS Operations & Security Manager

    May 2007 - Mar 2008

  • MIS Information Security Manager

    Mar 2005 - May 2007

  • Systems Unit Manager

    Feb 2004 - Mar 2005

  • Senior Systems Engineer

    Jan 2002 - Feb 2004

  • Systems Engineer

    Apr 2001 - Jan 2002
• 

  Business Management Company - BMC ( KSA )

  Nov 2008 - Jan 2009

  Security & Systems Manager

  • Design and presentation for Atheeb's 3 data centers' security and systems in Riaydh, Jeddah, and Dammam. Based onSecure Computing, Juniper, and Foundry boxes. Atheeb is Saudi Arabia's 3rd Data Service Provider (DSP).• Operation and support for Saudi Telecom Company's (STC) Security Operation Centre (SOC) and several Saudi banks which is composed of Secure Computing's CyberGuard TSP and SideWinder firewalls, WebWasher URL and content filtering, and IronMail anti-Spam systems.

• 

  Abu Dhabi Islamic Bank

  Mar 2009 - Aug 2009

  Data Security Officer

  • Information Security Assessment.• Design & review of the NBD's DC, HQ, and branches security measures.• Pinpointing & hardening of the core banking application platform's problems and security issues respectively.

• 

  Etisalat

  Aug 2009 - Dec 2022

  Senior Solutions Architect
• 

  Red Hat

  Jan 2023 - now

  Senior Technical Account Manager