Mohamed Rafik Ibrahim Eldieb

• Serve as CTO-equivalent technical lead, managing integration between in-house programmers (AlphaSS) and the core trading system provider (EGID). • Act as primary technical point of contact for system provider EGID and hosting datacenter EGIT, coordinating platform releases, uptime, and infrastructure changes. • Architect hybrid identity infrastructure using AD hybrid join, Azure AD Connect, Microsoft Entra ID, and Microsoft Intune, integrating on-premises Active Directory with cloud endpoint management. • Deploy and manage FortiGate, FortiAnalyzer, Kaspersky XDR Optimum, and SoftEther VPN, reducing security incidents by 40% through centralized policy and traffic inspection. • Administer MeshCentral for remote device management and Snipe-IT for IT asset tracking. • Manage biometric and access control systems (CrossChex, Anviz) for physical security integration. • Migrate on-premises Exchange to Exchange Online, improving email availability to a 99.9% SLA and reducing admin overhead by 25%. • Manage MS-SQL database clusters supporting trading platforms with 99.9% uptime.

• Deployed Azure Web Apps and Azure Database instances supporting production applications. • Built IIS preconfiguration tooling to standardize website attachment and streamline update deployment across IIS servers. • Configured F5 load balancing and high availability for servers and firewalls, and designed live network segmentation for security zoning. • Configured SSL VPN and IPsec site-to-site tunnels connecting branch offices with automated failover. • Engineered Fortinet security fabric (FortiGate/FortiSwitch/FortiAP) across three sites, centralizing policy management via FortiManager. • Used FortiAnalyzer SIEM to identify anomalous traffic and proactively block more than 200 potential threats monthly. • Optimized Azure resources through VM rightsizing and reserved instances, achieving $45K in annual cloud cost reduction. • Managed MS-SQL high-availability groups, maintaining RPO under 15 minutes for critical financial databases.

• Installed, configured, and administered Windows Server, Active Directory, Group Policy, file shares, WSUS, WDS, and FortiGate firewall • Developed and implemented IT infrastructure strategies, policies, and procedures • Monitored and maintained IT systems, networks, and applications ensuring optimal performance

• Spearheaded Sophos XG firewall deployment replacing legacy infrastructure, improving threat detection accuracy by 35% • Led IT team of 4 technicians through ITIL-based change management processes, achieving 98% on-time project delivery • Implemented WDS automated imaging reducing workstation deployment time from 4 hours to 45 minutes • Established disaster recovery protocols with 4-hour RTO through Azure Site Recovery implementation • Configured DFS namespace and replication for 5TB of shared data across 2 sites ensuring 99.9% file availability • Managed IT staff including hiring, training, and performance evaluation

• Developed and implemented IT strategies supporting organizational goals across multiple locations. • Configured Windows Server, Active Directory, Group Policy, and pfSense firewall infrastructure, maintaining 99.8% uptime.

• Installed, configured, and administered Windows Server, Active Directory, Group Policy, file shares, and Sophos Firewall. • Developed security policies to protect data, software, and hardware from unauthorized access.

• Delivered L2/L3 technical support for four major government digital transformation projects: Petroleum Products Distribution Management, Social & Solidarity Safety Programs, Farmer Development Program, and the Traffic Department at the Ministry of Interior. • Resolved 95% of network connectivity and Active Directory authentication tickets within SLA timeframes. • Deployed and configured Windows Server infrastructure across 12 remote sites supporting more than 500 end users.

• Installed, configured, and administered Windows Server 2012 R2, Active Directory, Group Policy, file shares, and Sophos XG Firewall UTM. • Managed brokerage trading systems and ensured regulatory compliance.

• Provided technical support for TE-Data broadband accounts, resolving more than 80 connectivity issues daily with 95% customer satisfaction.

• Installed, configured, and administered Windows Server, Active Directory, Group Policy, file shares, and firewall infrastructure. • Managed margin trading systems, back-office operations, and international trading platforms.

• Managed branch IT infrastructure and trading workstation support. • Served as Customer Service Official, acting as a delegate for headquarters and handling customer communications.

Earlier education: High School, Mathematics, at La Rose De Lisieux School (1989-2002).

Skills measured: Design identity, governance, and monitoring solutions Design data storage solutions Design business continuity solutions Design infrastructure solution

Skills measured: Manage Azure identities and governance Implement and manage storage Deploy and manage Azure compute resources Implement and manage virtual networking Monitor and maintain Azure resources

Skills measured: Plan and implement an Azure Virtual Desktop infrastructure Plan and implement identity and security Plan and implement user environments and apps Monitor and maintain an Azure Virtual Desktop infrastructure

Skills measured: Design and implement core networking infrastructure Design, implement, and manage connectivity services Design and implement application delivery services Design and implement private access to Azure services Secure network connectivity to Azure resources

Skills measured: Design and implement processes and communications Design and implement a source control strategy Design and implement build and release pipelines Develop a security and compliance plan Implement an instrumentation strategy

Skills measured: Develop Azure compute solutions Develop for Azure storage Implement Azure security Monitor, troubleshoot, and optimize Azure solutions Connect to and consume Azure services and third-party services

Skills measured: Configure and manage a Teams environment Manage teams, channels, chats, and apps Manage meetings and calling Monitor, report on, and troubleshoot Teams

Design and implement data storage Develop data processing Secure, monitor, and optimize data storage and data processing