Peter Farah
Infrastructure Automation Engineer
I work from the packet up — fingerprinting router queue algorithms, hardening enterprise networks, and automating infrastructure at Murex.
Engineering at the edge of the network
I'm a network and infrastructure engineer specialising in low-level networking, infrastructure automation, and threat intelligence. I hold a Master's in Cybersecurity from the Institut Polytechnique de Paris (graduated with highest distinction) and a Bachelor's in Computer and Communication Engineering from the American University of Beirut.
Currently, I am an Infrastructure Automation Engineer at Murex, working with Ansible, Jenkins, Git, and Kubernetes. My broader experience spans managing enterprise network infrastructure at Dar, integrating automated security monitoring pipelines at Exeo, and developing advanced Active Queue Management (AQM) classification frameworks during my research internships. Across these roles I've turned complex infrastructure and security problems into automated, observable systems — from CI/CD pipelines to hardened enterprise networks.
Experience & Education
Infrastructure Automation Engineer Murex
- Automating infrastructure delivery with Ansible, Jenkins, and Git.
- Building CI/CD pipelines and Kubernetes-based deployment workflows.
- Provisioning Azure infrastructure with Terraform, backed by remote TF state.
Institut Polytechnique de Paris
Master of Computer Science, Cybersecurity
Graduated with highest distinction in M2. Focused on secure protocols, modern networking, network security, security-oriented programming, and advanced network filtering.
Network Security Researcher Polytechnique & Télécom SudParis
- Research Focus: Investigating protection mechanisms in routers against fairness attacks in TCP, focusing on Active Queue Management (AQM) algorithms — CoDel, FQ-CoDel, Cake, PIE, RED, FIFO, and FQ.
- Architecture: Developed a testbed utilising custom C code to measure bottleneck bitrates, verify bottleneck types, and generate UDP traffic to capture RTT traces.
- Classification: Built a Python-based two-stage classifier using Dynamic Time Warping (DTW) to successfully identify active AQM algorithms in real-world networks with high accuracy.
- Read the full AQM Research Write-up →
SOC R&D Intern Exeo
- Integrated Bitdefender and Grafana via Python and SQL for security posture visualisation.
- Developed full vertical integration of Grafana, Prometheus, SNMP devices (Cisco/Fortigate), and various APIs to provide clients with full visibility over their network.
- Automated alert management and ticket creation via Python webhooks into Autotask.
Cybersecurity and Network Engineer Dar
- Managed and deployed hardened configurations across 100+ access layer Cisco switches.
- Maintained and automated Fortigate firewall and proxy operations to enhance security.
- Managed and patched vulnerabilities generated by Nexpose to protect the network infrastructure.
- Developed a migration plan to secure cipher suites for VPN connections.
American University of Beirut
Bachelor of Engineering – BE
Dean's Honor List. Core coursework in cryptography, network security, and internet security.
Cyber Threat Intelligence Officer Intern POTECH
- Developed Python scripts (under NDA) to automate reconnaissance through web scraping.
- Orchestrated takedown operations via interactions with APIs and web bots.
Skills & Tooling
Selected Projects
AQM Classification Research & Live Network Visualizer
- Identifies which AQM algorithm a router is running — CoDel, FQ-CoDel, Cake, PIE, RED, FIFO, or FQ — from the outside, using RTT traces captured by a custom C testbed.
- A two-stage Python classifier built on Dynamic Time Warping (DTW) does the fingerprinting; an interactive in-browser simulator visualises how each queue discipline handles congestion and latency.
- Launch the live simulator → · Read the research write-up →
Synology DS925+ NAS & Self-Hosted App Platform
- Built around a Synology DS925+ with 2×18 TB Seagate Exos drives in SHR-1, giving single-drive fault tolerance.
- Scheduled daily and monthly snapshots for point-in-time data recovery and ransomware protection.
- Dedicated 2 TB SSD volume hosting containerized apps via Synology's built-in Container Manager (Docker).
- Runs a Cloudflare Zero Trust agent to securely expose selected services without any port forwarding.
- Hosts a full Django e-commerce shop I built for a friend: shop.farmavetservices.com.
- Read the NAS architecture breakdown →
Home Lab Server & Monitoring Infrastructure
- Designed and deployed a self-hosted Ubuntu server (VM-based) to run production-grade Python services.
- Developed a fully automated Python pipeline for YouTube video generation and upload, plus a custom Python FTP service for secure media ingestion.
- Implemented infrastructure monitoring using Prometheus and Grafana.
- Exposed via Cloudflare Zero Trust Tunnel — no port forwarding: SSH · Grafana · Uptime · request access.
- Read the full architecture breakdown →
Client-Server Secure Connection
Exchange of symmetric key with asymmetric keys for file transfer. Supports custom certificate exchange signed by a custom certificate authority.
View on GitHub →Galois Field Arithmetic Calculator
Instant results for non-trivial arithmetic computations in Galois Fields reaching GF(2^571).
View on GitHub →Network Attack Implementation & Detection
Developed multiple tools including DNS spoofing, TCP SYN flooding/detection, HTTP/TCP flow injection, and ICMP quench local network attacks to study protocol weaknesses.
Network Cell Analyzer for Android
Displays carrier name, network types, dBm, SNR, and frequency band. Built with Java and SQL.
View on GitHub →Certificates & Honors
- Institut Polytechnique de Paris: Graduated with highest distinction
- American University of Beirut: Dean's Honor List
- Bitdefender Certified: MSP Technical Specialist, Technical Solutions Professional (July 2024)
- Fortinet: Security-Driven Networking training
- IELTS: CEFR level C1 (Nov 2022)
Let's build something resilient
Open to conversations about infrastructure automation, network engineering, and security. The fastest way to reach me is email — or grab the CV below.