Karim Majdoub

network engineer for a globally distributed, ultra-low-latency financial data platform serving institutional clients across EMEA and APAC.

• • Design, implement, and operate multi-site BGP/OSPF routing topologies and MPLS L3 VPN interconnects across 10+ Points-of-Presence.

• • Architect and deploy IPsec (IKEv1/IKEv2) site-to-site VPN tunnels and PPTP remote-access solutions, securing connectivity for enterprise clients across geographically distributed sites.

• • Manage full network security : Cisco ASA firewall rule-sets, ACL policies, TACACS+/RADIUS , and Role Based Access Control (RBAC).

• • Lead incident response and vendor escalation (Cisco TAC), diagnosing and resolving complex Layer 2/3 faults and reducing Mean Time to Resolution (MTTR) significantly across all P1/P2 incidents.

• • Develop and maintain Python 3.x automation scripts (Netmiko, NAPALM, Paramiko, Genie) replacing manual provisioning workflows.

• • Monitor infrastructure performance and SLA compliance using Centreon and Zabbix.

Supervised network support operations for an international carrier, managing multi-vendor infrastructure and enterprise client SLAs.

• • Managed BGP, OSPF, and VPN tunnel operations for enterprise and carrier clients, resolving routing, authentication, and connectivity incidents.

• • Conducted preventive and corrective maintenance on Cisco routers and switches, including firmware upgrade campaigns and hardware lifecycle management.

• • Maintained detailed network configuration documentation, change management records, and operational runbooks.

• • Coordinated with vendors and international NOC teams for cross-border network incident resolution.

• • Participated in the design and implementation of an open-source SOC solution combining SIEM and SOAR capabilities using Wazuh, TheHive, MISP, and Shuffle for centralized monitoring and automated incident response.

• • Deployed and configured SIEM infrastructure for log collection, threat detection, and security event analysis, including the creation of atack simulations to validate detection rules and system effectiveness.