I build the infrastructure, instrument it, then automate the detection layer on top. Most recently: a six-service ML-driven security observability platform for OpenShift, running entirely inside the cluster with zero data egress.
End-of-studies engineering project · NextStep IT × TEK-UP
A six-layer security observability platform for OpenShift/Kubernetes. It consumes cluster-native signals (OVN ACL drop logs, live NetworkPolicy objects, time-series flow statistics) and converts them into structured findings, ranked anomalies and plain-English explanations.
Detection in three tiers: Z-score spikes over Welford baselines, deterministic rules, and Isolation Forest for multivariate outliers.
Policy audit: live NetworkPolicy objects checked against an 8-rule catalogue, scored per namespace and graded A–F.
On-cluster LLM: llama3.2:3b on a dedicated tainted node, CPU-only Q4 inference, 3.8 s time-to-first-token, zero data egress.
A segmented enterprise network designed to shift the defensive posture from reactive to proactive: five VLANs, redundant firewalls, encrypted site-to-site tunnels, and a supervised NOC on top.
5-VLAN segmentation (DMZ, Management/NOC, Staff, HR, IT) behind an HA pfSense firewall pair.
Site-to-site OpenVPN tunnels linking HQ and branch office, over Core/Distribution/Access switching layers.
Zabbix NOC dashboard supervising 12+ hosts, with Suricata IDS feeding an ELK correlation stack.
pfSenseOpenVPNZabbixSuricataELKWindows Server ADGNS3
A complete NOC in a simulated enterprise (monitoring, security, centralised logging and incident management) using only open-source tooling across four VLANs.
pfSense for firewalling, VLAN routing, DHCP and NAT; Zabbix for performance and availability.
Wazuh for security monitoring and centralised logging, Snort for intrusion detection, GLPI for assets and ticketing.
Validated by attack: port scans and ICMP floods confirmed Snort alerting, Wazuh log capture, and the full GLPI ticket lifecycle.
A security architecture built around confidentiality, integrity, availability, accountability and traceability, spanning both infrastructure and business applications.
Identity-based access control with centralised authentication via FreeRADIUS and Active Directory.
Network segmentation with firewall enforcement; centralised log collection and SIEM analysis in Wazuh.
A pocket-sized defensive appliance for untrusted networks: OpenWRT as the routing and firewall base, Pi-hole for DNS-level filtering, a Cowrie honeypot for inspecting attacker traffic, and OpenVPN for encrypted tunnelling.
USB HID keyboard emulation built to support USB hardening assessments and red-team/blue-team exercises in controlled labs. Includes firmware for ATmega32U4-class boards, a plain-text payload scripting format, and full PCB schematics.
Explicitly scoped to authorised testing only. The repository documents responsible-testing and legal requirements.
Pick the market and the language: each version is written for that market, not translated into it.
Region
Language
Loading the CV…The CV preview needs the cv/ folder next to this page. Use the buttons above.
Experience
Where the work was done.
Jan – May 2026
Network & Security Engineer Intern (PFE)
NEXT STEP IT · Charguia 1, Tunis
Designed and built the NetworkPolicy Intelligence System, a security observability platform for OpenShift/Kubernetes clusters, as the end-of-studies engineering project in partnership with TEK-UP University.
Jun – Jul 2025
Network Security Intern
Tunisie Telecom
Deployed a secure enterprise network with integrated SOC and VPN capabilities: VLAN segmentation, redundant pfSense firewalls, site-to-site tunnels, Suricata IDS and an ELK log correlation stack under a Zabbix NOC dashboard.
Feb – Jul 2023
IoT Systems Intern
Compagnie des Phosphates de Gafsa (CPG)
Developed a real-time IoT solution for industrial weighing monitoring and traceability using Raspberry Pi, SIM808 cellular modules and the ThingsBoard platform.
Education
Two degrees, one direction.
2023 – 2026
Engineering Degree: Security of Computer Systems and Networks
TEK-UP University of Digital Sciences · Tunis
Computer and Information Systems Security / Information Assurance. End-of-studies engineering project completed at NextStep IT.
