Liban Houssein

Network & Cloud Security Analyst @Canadian Medical Association

Enforce specific security standards that govern various levels of security, such as Operating Systems Hardening Standards, Firewall Standards, etc- Create different policies, routes, VPN, UTM (Web Filter, IPS, Application Control, AV - Enforce different policies and profiles on endpoint through EMS • Participate in the review and approval of new systems implementation or development from the security perspective in Azure Cloud- Implement Azure AD Connect with PHS method to synchronize object and identity information for on-premises and cloud resources - Enforce MFA and SSPR for all users except a couple of break-glass accounts - Apply travel conditional access policies - Administer identity through Azure AD PIM and RBAC - Secure and restrict traffic through NSG - Monitor risky users through sign and audit logs - Secure SQL servers and databases through encryption, AD authentication, and keyvault - Implement HA FortiGate pair on azure with an external and internal load balancer - Onboard servers and endpoint on Microsoft defender (ATP) with Intune- Redesign routing with OSPF between HQ and branches - Troubleshoot IPSEC remote and site-to-site VPN • Track vulnerabilities and incidents found in the infrastructure using Azure Defender for cloud and Azure Sentinel. • Improve Fortinet Security Fabric rating by implementing different security recommendations. • Solid understanding and troubleshooting capability of L2/L3 protocols (VPN, SSL, ARP, HSRP, VRRP, STP, BGP, VRF, OSPF) in a Cisco environment • Good understanding of application protocols such as DNS, DHCP, HTTP, FTP, Telnet, SSH • Knowledge of security concepts such as NAT/PAT, IPSEC, SSL, DDoS, IP Spoofing, etc.