mahmoud.betillo's CV
mahmoud.betillo
Senior Network & Cybersecurity Engineer
Profile summary
Senior Network and Cybersecurity Engineer with 8 years of progressive experience in telecommunications, financial services, and enterprise IT. Track record of engineering secure IP/MPLS backbones, executing complex multi-vendor firewall migrations, and deploying enterprise endpoint security platforms across large-scale environments. Dedicated to maintaining high availability, robust network stability, and End-to-end security baselines aligned with regulatory and operational standards.
Career highlights
Backbone and Firewall Migrations: Engineered and secured carrier-grade IP/MPLS backbones and executed multi-vendor firewall migrations for national mobile operators and enterprise networks using advanced routing protocols.
Endpoint Security Deployments: Deployed and managed enterprise endpoint detection and response platforms across hundreds of endpoints to improve threat detection speed and contain active attacks.
Infrastructure and Data Center Upgrades: Executed data center core upgrades and campus network migrations that increased switching capacity, reinforced traffic resilience, and improved overall operational stability.
Professional Certifications: Earned multiple industry certifications including CCNP Enterprise, NSE 7 Enterprise Firewall, and Certified Ethical Hacker to validate advanced technical expertise.
Key skills
Professional experience
Directs technical pre-sales operations as a senior engineer, providing network and security architecture guidance across government, education, and enterprise sectors. Oversees high-level and low-level design phases, tender engineering workstreams, and vendor evaluations.
- Designs campus and branch networks Using ALE OmniSwitch, OmniAccess Stellar Wi-Fi, and OmniVista NMS for routing, switching, and Wi-Fi planning.
- Configures and stages OmniSwitch, Stellar access points, and WatchGuard Firebox appliances while supporting deployment and troubleshooting.
- Leads technical workstreams for major tenders including the Palestinian Water Authority, Central Elections Commission, and Ministry of Education.
- Performs technical evaluations of cybersecurity platforms from WatchGuard, Fortinet, and Check Point for partners and customers.
Directed infrastructure, security, service desk, and systems across headquarters and regional sites, operating under the executive leadership.
- Managed a campus-wide Cisco-to-Alcatel-Lucent OmniSwitch migration and rebuilt the VLAN and QoS architecture, improving network stability by 40% with no operational disruption.
- Deployed Kaspersky Next EDR across 270+ endpoints with centralized visibility and automated threat response, reducing mean time to detect by 50%.
- Modernized servers, virtualization, backup, and endpoint security, reducing unplanned downtime by 30% and strengthening disaster-recovery readiness.
Directed security engineering for a national mobile operator serving 1.5M subscribers, overseeing the IP/MPLS backbone, carrier-grade CGNAT platforms, and multi-vendor next-generation firewall estate under a 99.9% SLA.
- Executed the Juniper-to-FortiGate 4000-series and 600F firewall migration with zero disruption, improving backbone reliability by 35% while complying with regulatory standards.
- Upgraded the Ericsson-to-Cisco NCS and Nexus data center core without downtime, increasing switching capacity and east-west traffic resilience by 35%.
- Integrated security tools including CrowdStrike EDR and SIEM into a unified SOC workflow, executing monthly vulnerability scans and remediation tracking to improve security posture by 40%.
Managed the network, data center, and security infrastructure for a financial services institution supporting a headquarters and 30 branches.
- Deployed CrowdStrike Falcon EDR and Falcon Spotlight organization-wide, containing an active ransomware attack with zero data loss across all 30 branches.
- Administered FortiGate NGFW, web application firewall, and site-to-site IPsec VPN tunnels securing communications between branches and headquarters.
- Maintained VMware vSphere 7 and Veeam Backup and Replication with tested disaster recovery and documented recovery time objectives.
- Standardized branch security across 25 sites by deploying FortiGate NGFW with unified policy templates and site-to-site IPsec VPN, establishing a consistent and auditable security baseline.
- Administered Windows Server, Active Directory, group policies, and Kaspersky Security Center for user provisioning, endpoint protection, and centralized patch management.
Education
Computer Engineering
- Palestine
Certifications
Languages
Arabic · Native
English · Professional