01
About
Engineering at the edge of the network
I'm a network and infrastructure engineer specialising in low-level networking, infrastructure automation, and threat intelligence. I hold a Master's in Cybersecurity from the Institut Polytechnique de Paris (graduated with highest distinction) and a Bachelor's in Computer and Communication Engineering from the American University of Beirut.
Currently, I am an Infrastructure Automation Engineer at Murex, working with Ansible, Jenkins, Git, and Kubernetes. My broader experience spans managing enterprise network infrastructure at Dar, integrating automated security monitoring pipelines at Exeo, and developing advanced Active Queue Management (AQM) classification frameworks during my research internships. Across these roles I've turned complex infrastructure and security problems into automated, observable systems — from CI/CD pipelines to hardened enterprise networks.
02
Selected work
Selected projects
Research, infrastructure, and automation — with the implementation details one click away.
Network research
Fingerprinting router queues
Identify a router's queue management algorithm from end-to-end RTT measurements.
- Built
- A C traffic testbed and two-stage Python classifier using Dynamic Time Warping.
- Result
- Classification of seven queue disciplines, with a browser simulator to explore congestion and latency.
CPythonDTW
Self-hosted infrastructure
A home for data and apps
A Synology DS925+ platform for resilient storage and containerized applications.
- Built
- 2 × 18 TB drives in SHR-1, scheduled snapshots, a dedicated 2 TB SSD, and Docker services.
- Result
- Single-drive fault tolerance and remote access through Cloudflare Zero Trust, without port forwarding.
DockerDjangoCloudflare
Automation & observability
An observable home server
Python services on an Ubuntu VM, with monitoring built into the architecture.
- Built
- Automated YouTube publishing, media ingestion, and Prometheus and Grafana monitoring.
- Result
- Repeatable service workflows with visibility into their operation and access through Cloudflare Zero Trust.
PythonLinuxPrometheus
Client-Server Secure Connection
Exchange of symmetric key with asymmetric keys for file transfer. Supports custom certificate exchange signed by a custom certificate authority.
View on GitHub
Python
TLS/PKI
Cryptography
Galois Field Arithmetic Calculator
Instant results for non-trivial arithmetic computations in Galois Fields reaching GF(2^571).
View on GitHub
Python
Cryptography
Network Attack Implementation & Detection
Developed multiple tools including DNS spoofing, TCP SYN flooding/detection, HTTP/TCP flow injection, and ICMP quench local network attacks to study protocol weaknesses.
Python
C
Scapy
Raw Sockets
Network Cell Analyzer for Android
Displays carrier name, network types, dBm, SNR, and frequency band. Built with Java and SQL.
View on GitHub
Java
SQL
Android
03
Career
Experience & Education
Mar 2026 – PresentBeirut, Lebanon
Experience
Infrastructure Automation Engineer Murex
- Automating infrastructure delivery with Ansible, Jenkins, and Git.
- Building CI/CD pipelines and Kubernetes-based deployment workflows.
- Provisioning Azure infrastructure with Terraform, backed by remote TF state.
- Upgraded the Jenkins toolchain with Helm charts, Kubernetes orchestration, and Docker-based deployments.
Sep 2023 – Dec 2025France
Education
Institut Polytechnique de Paris
Master of Computer Science, Cybersecurity
Graduated with highest distinction in M2. Focused on secure protocols, modern networking, network security, security-oriented programming, and advanced network filtering.
Sep 2024 – Oct 2025Évry & Palaiseau, France
Experience
Network Security Researcher Polytechnique & Télécom SudParis
- Research Focus: Investigating protection mechanisms in routers against fairness attacks in TCP, focusing on Active Queue Management (AQM) algorithms — CoDel, FQ-CoDel, Cake, PIE, RED, FIFO, and FQ.
- Architecture: Developed a testbed utilising custom C code to measure bottleneck bitrates, verify bottleneck types, and generate UDP traffic to capture RTT traces.
- Classification: Built a Python-based two-stage classifier using Dynamic Time Warping (DTW) to successfully identify active AQM algorithms in real-world networks with high accuracy.
- Read the full AQM Research Write-up →
Apr 2024 – Jul 2024Paris, France
Experience
SOC R&D Intern Exeo
- Integrated Bitdefender and Grafana via Python and SQL for security posture visualisation.
- Developed full vertical integration of Grafana, Prometheus, SNMP devices (Cisco/Fortigate), and various APIs to provide clients with full visibility over their network.
- Automated alert management and ticket creation via Python webhooks into Autotask.
Mar 2023 – Aug 2023Verdun, Lebanon
Experience
Cybersecurity and Network Engineer Dar
- Managed and deployed hardened configurations across 100+ access layer Cisco switches.
- Maintained and automated Fortigate firewall and proxy operations to enhance security.
- Managed and patched vulnerabilities generated by Nexpose to protect the network infrastructure.
- Developed a migration plan to secure cipher suites for VPN connections.
Oct 2018 – Dec 2022Beirut, Lebanon
Education
American University of Beirut
Bachelor of Engineering – BE
Dean's Honor List. Core coursework in cryptography, network security, and internet security.
Jun 2022 – Dec 2022Beirut, Lebanon
Experience
Cyber Threat Intelligence Officer Intern POTECH
- Developed Python scripts (under NDA) to automate reconnaissance through web scraping.
- Orchestrated takedown operations via interactions with APIs and web bots.
04
Toolbox
Skills & Tooling
Software & Automation
Python
C
Linux
Git
Cybersecurity
Wireshark
Nmap
Burp Suite
Nexpose
Bitdefender
Networking
Cisco Routing/Switching
MikroTik
Fortinet FortiGate
FortiSwitch
DevOps
Ansible
Jenkins
Kubernetes
Terraform
Docker
Grafana
Prometheus
Cloudflare Zero Trust
Systemd
API Integration
Languages
English — Fluent
French — Fluent
Arabic — Native
05
Credentials
Certificates & Honors
- Institut Polytechnique de Paris: Graduated with highest distinction
- American University of Beirut: Dean's Honor List
- Bitdefender Certified: MSP Technical Specialist, Technical Solutions Professional (July 2024)
- Fortinet: Security-Driven Networking training
- IELTS: CEFR level C1 (Nov 2022)
