Mounir BELGHIT

Network engineer with nearly 10 years of experience in designing, securing, and optimizing IT infrastructures. Specialist in network and systems administration with expertise in SD-WAN, firewall security (Fortinet), virtualization (VMware), and enterprise network solutions. Currently overseeing the global network infrastructure at HR Path, ensuring the maintenance, security, and modernization of systems across multiple data centers and international sites. Skilled in troubleshooting, automation, and technical documentation, with a strong focus on cybersecurity and compliance. Passionate about IT innovation and network security, I am seeking a new challenge in Kuwait to apply my expertise to strategic projects and enhance infrastructure resilience.

• Migration of an aging MPLS architecture to an SD-WAN architecture across HR Path sites in France and worldwide.
• Hub-and-Spoke architecture with a data center composed of three sites connected in a metro cluster using dark fiber, with branch offices connected via SD-WAN.
• Complete overhaul and reorganization of network addressing in the data center and branch offices.

• Installation and configuration of FortiAuthenticator to manage Network Access Control (NAC) with SSO and SSL filtering for firewall rules.
• Project to secure wired and Wi-Fi network connections at HR Path using 802.1X and EAP-TLS certificates, authenticated via a FortiAuthenticator-powered RADIUS (previously managed via Windows NPS).
• Securing SSL VPN access and branch office access through FortiAuthenticator (deployed in July 2018).
• Deployment of Fortinet-embedded NAC to secure branch office connections.
• 802.1X security enforcement for cameras, printers, and user workstations, with policies applied at the switch level. Devices failing compliance rules are placed in a quarantine network with no access.

• Hardware migration of core network firewalls in the data center, upgrading from Fortigate 501E to 1100E. Full project management, from study to execution, scheduled during non-business hours.
• Migration of WAN provider equipment in the data center, requiring updates to all NAT rules and IPsec tunnels to match the new IP range.
• Overhaul of firewall rules, reorganizing them into structured sections based on a defined logic.

• Migration of Office 365 authentication from a federated model to direct authentication, now allowing users to reset their passwords (in production for nearly one year).

• Implementation of a complete Avaya IPBX telephony solution, including a conference call module and an automated switchboard.
• Migration of direct dial (SDA) lines to the solution in collaboration with the telecom operator.

• Revamp of VMware virtualization infrastructure in 2020 (19 ESXi hosts distributed across four clusters: Production, Cybersecurity, Infrastructure, and Development).
• Configuration of Dell storage switches, distributed across the three data centers and connected via dark fiber, enabling a SAN Stretched Cluster architecture.

• Configuration and deployment of a captive portal with self-enrollment across the group.