Network security
VLAN segmentation, firewall policies, VPNs and DMZ design, with hands-on FortiGate and Sophos XG labs.
CONTROL ACCESS. REDUCE EXPOSURE. OPEN TO INTERNSHIPS & JUNIOR ROLES
CYBERSECURITY / DIGITAL INFRASTRUCTURE
Ibrahim
Mounir.
Secure networks. Resilient systems.
A hands-on approach.
A cybersecurity graduate focused on network security, systems administration and monitoring. I build practical labs, investigate vulnerabilities and document what I learn.
ISTA KhénifraGraduate · 2026
Maroc DatacenterCybersecurity internship
M’rirt, MoroccoBased in Morocco
HANDS-ON WITH
- FortiGate
- Wazuh
- Active Directory
- Linux
- Docker
- Python
01 / PROFILE
Security-minded.
Infrastructure-focused.
I’m a Specialized Technician in Digital Infrastructure, Cybersecurity option. My training at ISTA Khénifra and internship at Maroc Datacenter shaped an approach grounded in practice: understand the environment, secure it, then verify the result.
Systems & visibility
Linux and Windows Server administration, Active Directory, GPOs, Wazuh SIEM and Zabbix monitoring.
UNDERSTAND WHAT IS RUNNING.Building & learning
Developing Khedima, a Moroccan services marketplace, while strengthening my Linux, Docker and DevOps fundamentals.
TURN LEARNING INTO PROJECTS.02 / EXPERIENCE & EDUCATION
A foundation
built in practice.
Professional exposure, a technical diploma and lab work that connects networking, systems and cybersecurity.
MAR 20261 month · Témara
PROFESSIONAL INTERNSHIP
Cybersecurity InternMaroc Datacenter
Worked with the Network & Security team on datacenter infrastructure, contributing to configuration, maintenance and monitoring tasks.
- Participated in firewall policy configuration and secure remote access through IPsec / SSL VPNs.
- Configured VLANs and monitored ports to support network segmentation.
- Assisted with server administration, static IP configuration and equipment monitoring.
Firewall & VPNVLAN segmentationServer administrationMonitoring
2024 — 2026ISTA Khénifra · OFPPT
TECHNICAL DIPLOMA
Digital InfrastructureCybersecurity option
Specialized Technician training covering network security, Linux and Windows administration, virtualization, Active Directory, penetration testing and cryptography.
Final-year project
A segmented network with FortiGate + Sophos XG, Active Directory, Wazuh SIEM and a web server in a DMZ.
Explore the architecture2023Khénifra, Morocco
EDUCATION
BaccalaureatePhysical Sciences
03 / SELECTED WORK
Built, tested
and understood.
Academic labs, security challenges and a personal product in development. Each project explains its context, my work and the technical focus.
01FINAL-YEAR PROJECT · 2025–2026
Secure network infrastructure
A dual-firewall lab with segmented VLANs, Active Directory and centralized security monitoring.
02PERSONAL PROJECT · IN DEVELOPMENT
Khedima — a services marketplace
AI-assisted development (vibe coding) of a Moroccan marketplace connecting customers and local professionals, with roles, catalog management and messaging.
03INFRASTRUCTURE LABS
Security & infrastructure monitoring
Hands-on work with Wazuh and Zabbix to connect security event analysis with visibility into hosts and services.
04ACADEMIC SECURITY LAB
Active Directory security audit
A Windows domain lab for GPO hardening, controlled attack simulations and documented vulnerability analysis.
05CTF · SECDOJO
Offensive security challenges
Competition labs exploring injection, deserialization, container exposure and Active Directory enumeration.
06PRACTICAL WEB PROJECTS
Web interfaces & security review
HTML/CSS interfaces developed with AI assistance (vibe coding). Static application reviews cover exposed endpoints, APIs and version disclosure.
04 / TECHNICAL SKILLS
A practical
technical toolkit.
Developed through technical training, an internship and personal projects. My focus is depth through practice and clear documentation.
CURRENTLY BUILDING ON
Linux & Bash fundamentals, Docker workflows and DevOps foundations.
01
Network security
TRAINING & HANDS-ON LABSFortiGate · Sophos XG · pfSense · VLAN · NAT · ACL · VPN · DMZ · TCP/IP
02
Systems & identity
TRAINING & HANDS-ON LABSLinux · Windows Server · Active Directory · GPO · DNS · DHCP · VMware · GNS3
03
Monitoring
PROJECT & LAB PRACTICEWazuh SIEM · Zabbix · Security event analysis · Host and service monitoring
04
Security testing
ACADEMIC LABS & CTFNmap · Wireshark · Vulnerability analysis · AD enumeration · OSINT fundamentals
05
Code & web
PERSONAL PROJECT PRACTICEPython · SQL · HTML / CSS · Next.js · TypeScript · PostgreSQL · Prisma
06
Tools & deployment
PROJECT PRACTICE / LEARNINGGit · Docker · Docker Compose · Nginx · Bash fundamentals
05 / HOW I WORK
A clear process.
Useful results.
Understanding why a configuration works matters as much as getting it to work.
- 01 / UNDERSTAND
Map the environment
Clarify the goal, inventory systems and identify access boundaries.
- 02 / BUILD
Configure with intent
Set up the lab, segment services and apply the required policies.
- 03 / VALIDATE
Test the behaviour
Check connectivity, review logs and investigate unexpected results.
- 04 / DOCUMENT
Make it explainable
Record the architecture, findings and configuration decisions.
06 / CREDENTIALS
Continuous learning.
Documented.
Selected certificates in networking, cybersecurity, Python and hosting. Open any certificate to view the original PDF.
07 / WAYS I CAN CONTRIBUTE
Support for your
technical projects.
Available for supervised technical work, lab setups and small infrastructure projects, with a focus on practical implementation and clear handover notes.
Security lab setup
Virtualized environments with firewalls, segmented networks and monitoring tools.
Systems support
Windows Server, Active Directory, GPO, DNS, DHCP and Linux configuration.
Network configuration
VLANs, routing, NAT, firewall rules and connectivity troubleshooting.
Technical documentation
Architecture notes, configuration steps and security findings that can be reviewed.
08 / LET’S CONNECT
Your next
team member?
I’m looking for an internship or junior role where I can contribute, learn from experienced engineers and keep developing my security skills.
Let’s start a conversation