Security architecture, layer by layer.
6 layers, 9 named engagements and 32 technologies, all drawn from the CV. Pick a layer to see what was delivered in it, or a regulator to see where that work landed.
The stack
Network & perimeter
Firewalls, VPNs, segmentation and network access control: the edges, and the paths between them.
Delivered at
CIB (Commercial International Bank)Banking
Internal banking security aligned to PCI-DSS and SWIFT CSP: OneSpan 2FA, Tripwire FIM, Forcepoint DLP, Palo Alto NGFW integrated with web and email gateways.
National Bank of Egypt (NBE)Banking
LogRhythm SIEM distributed across DC/DR, Tenable vulnerability management, perimeter firewalls, IPS and VPN acceleration.
Banque MisrBanking
Forcepoint DLP (web and email), Ivanti MobileIron MDM, OneSpan 2FA for internet banking, Cisco ISE proof of concept.
Central Bank of Egypt — MAQASACentral bank
Network access secured via L2L VPN for all Egyptian banks.
Banque du CaireBanking
DMVPN across 300+ branches, OneSpan 2FA and Tripwire FIM.
EGX (The Egyptian Exchange)Capital markets
Forcepoint email and web gateways plus sandboxing, with Palo Alto NGFW distributed across DC/DR.
PPC & GASCOOil & gas / OT
SCADA leak-detection security, firewalls (Palo Alto and FTD), SSL gateways, Ivanti/Cisco NAC and SolarWinds monitoring across national critical infrastructure.
Social Insurance MinistryGovernment
Connectivity and security across 450+ offices nationwide.
National Command Center, Ministry of InteriorGovernment / national security
24/7 national emergency-response infrastructure across data, voice, video, GPRS and TETRA. MPLS core, Nexus data centres, two-tier ASA/Check Point firewall architecture with RSA identity.
Technologies
- Network, perimeter & OT security
- NGFW (Cisco Firepower, Fortinet, Palo Alto, Check Point), VPN (IPsec, SSL VPN, DMVPN, GETVPN), segmentation, ZTNA (Ivanti, Appgate), NAC (Cisco ISE, Ivanti), OT/ICS and SCADA security, PKI and HSM.
- Network infrastructure & routing
- BGP, OSPF, EIGRP, MPLS; Cisco Nexus 7K/5K/2K, Catalyst 6500; DSL/DSLAM; Motorola (Vanguard, Codex); high-availability network design.
Vendors
Every technology in the record
“In the CV” is the span of years across the roles that name each one. Where no role names it, the table says so rather than guess.
32 of 32 technologies
| Layers | Named clients | ||
|---|---|---|---|
| Cisco | Network & perimeter | 2001–2025 | Banque Misr, PPC & GASCO |
| Palo Alto Networks | Network & perimeter, Detection & response | 2017–2025 | CIB (Commercial International Bank), EGX (The Egyptian Exchange), PPC & GASCO |
| Fortinet | Network & perimeter | 2007–2025 | — |
| Check Point | Network & perimeter | 2012–2017 | National Command Center, Ministry of Interior |
| F5 | Applications & APIs | 2012–2024 | — |
| Forcepoint | Data, Network & perimeter | 2017–2025 | CIB (Commercial International Bank), Banque Misr, EGX (The Egyptian Exchange) |
| LogRhythm | Detection & response | 2019–2025 | National Bank of Egypt (NBE) |
| Splunk | Detection & response | Technical domains | — |
| IBM QRadar | Detection & response | Technical domains | — |
| CrowdStrike | Detection & response | Vendor list only | — |
| Trellix | Detection & response | 2020–2024 | — |
| Kaspersky | Detection & response | 2025 | — |
| BeyondTrust | Identity & access | 2020–2025 | — |
| OneSpan | Identity & access | 2020–2025 | CIB (Commercial International Bank), Banque Misr, Banque du Caire |
| RSA Security | Identity & access, Detection & response | 2012–2018 | National Command Center, Ministry of Interior |
| Veridium | Identity & access | 2025 | — |
| Ivanti | Network & perimeter, Identity & access | 2020–2024 | Banque Misr, PPC & GASCO |
| Tenable | Detection & response | 2017–2025 | National Bank of Egypt (NBE) |
| Rapid7 | Detection & response, Applications & APIs | 2020–2025 | — |
| Darktrace | Detection & response | 2020–2025 | — |
| Group-IB | Detection & response | 2020–2025 | — |
| Akamai | Applications & APIs | Technical domains | — |
| Imperva | Applications & APIs | Technical domains | — |
| Kong | Applications & APIs | Technical domains | — |
| Symantec / Broadcom | Data, Network & perimeter | 2007–2024 | — |
| Trend Micro | Detection & response | 2017–2018 | — |
| Seclore | Data | 2025 | — |
| Black Duck | Applications & APIs | 2025 | — |
| Mandiant | Detection & response | 2025 | — |
| Recorded Future | Detection & response | 2025 | — |
| Infoblox | Network & perimeter | 2017–2018 | — |
| VMware | Network & perimeter | Vendor list only | — |
Need the detail behind a layer?
The CV has the full record by date. For anything it does not answer, ask directly.