Security Engineer · Systems Engineer · DevOps Engineer

Hi, I'm Abdelkader BENAISSI.

Security-focused engineer with hands-on experience in PKI, enterprise infrastructure, virtualization, and Active Directory. I build secure, automated, and compliant environments — backed by ISO 27001 Lead Auditor and CompTIA Security+ certifications.

View Experience Contact Me
Current Role Systems Security Engineer – AGCE (Government Authority for Electronic Certification)
Location Algiers, Algeria · Open to remote
Open to opportunities

Core Profile

  • 🛡️ Security Engineering & ISO 27001 & CompTIA Security+ driven governance
  • 🔑 PKI, certificate authority operations & SSL/TLS
  • 🖥️ Enterprise infrastructure, AD, DNS, VMware vSphere, ESXi, Hyper-V
  • 📊 SIEM (FortiSIEM), log correlation & security monitoring
  • ⚙️ Linux, PowerShell & Bash automation, DevOps & containers

About

A quick overview of how I approach security, systems, and operations.

Who I Am

I'm a Security Engineer & Systems Engineer with hands-on experience in enterprise environments, PKI, virtualization, Active Directory, and network security. I focus on building secure, reliable infrastructure with strong operational practices and clear documentation.

My work spans government-grade infrastructure, interbank exchanges, national electronic certification, and IT operations for growing companies.

How I Work

  • Align security with business and regulatory requirements (ISO 27001 mindset).
  • Automate wherever possible: backups, assessments, and reporting.
  • Integrate SIEM, monitoring, and logging for real-time visibility.
  • Document architectures, procedures, and incident playbooks for repeatability.

Experience

Security & systems roles across government and enterprise environments.

Systems Security Engineer

Government Authority for Electronic Certification AGCE · Aug 2025 – Present · Algiers, Algeria

  • Support national electronic certification infrastructure (PKI) for government institutions and interbank exchanges within Algeria’s digital trust framework.
  • Administer Active Directory, DNS, domain controllers, and virtualization platforms.
  • Configure security policies, perform threat analysis, and ensure compliance with government security standards.
  • Manage enterprise-grade backup operations protecting critical government data.
  • Automate security workflows and solution deployments using scripting and API integrations.
PKI AD & DNS vCenter & iDRAC vSphere & ESXi Hyper-V Backup & Storage Security Policies

System Administrator & IT Operations Specialist

Shabakett Core · Aug 2024 – Aug 2025 · Algiers, Algeria

  • Administered Linux systems and deployed containerized applications using Docker.
  • Implemented firewalls and performed security audits while monitoring system performance.
  • Designed and automated backup strategies and disaster recovery plans.
  • Collaborated with cross-functional teams to troubleshoot issues and maintained detailed system documentation.
Linux Proxmox & LXC Docker pfSense & UFW SSH & Bash Backup & DR Cron & Rclone & Mutt Documentation

Education

Formal academic background in information systems and software engineering.

Master (MSc) – Information Systems and Software Engineering

University of Bouira, Algeria · 2023

License (Bachelor) – Information Systems and Software Engineering

University of Bouira, Algeria · 2021

Certifications & Training

Security & Compliance

  • CompTIA Security+ (2025)
  • ISO 27001:2022 Lead Auditor – Mastermind Assurance (2025)
  • Fortinet Certified Associate Cybersecurity – Fortinet (2025)
  • Fortinet FortiGate 7.4 Operator – Fortinet (2025)

Systems & Linux

  • Mastering Linux System Administration – Udemy (2023)
  • Ongoing self-study in virtualization, SIEM, DevOps & cloud security.

Skills

Security engineering, systems administration, enterprise infrastructure & automation.

Offensive Security

  • Penetration Testing
  • Vulnerability Assessment
  • Web App Testing
  • OWASP Practices
  • Burp Suite & Metasploit
  • CTF Player

Defense & Compliance

  • Threat Analysis
  • Risk Assessment
  • Policy Implementation
  • Security Auditing
  • Security Hardening
  • ISO 27001 Mindset

Systems & Infra

  • Active Directory & DNS
  • Windows Server & Linux
  • vSphere & ESXi & Hyper-V
  • iDRAC Management
  • High Availability Architecture
  • Backup & Storage (EMC, Data Domain, Unity)

Network Security & PKI

  • Firewall Management
  • FortiGate & pfSense
  • Cloudflare WAF
  • VLANs & VPNs
  • Nginx Reverse Proxy
  • Certificate Authority Operations
  • Certificate Management
  • SSL/TLS Implementation

Monitoring & SIEM

  • FortiSIEM Deployment
  • Log Correlation & Analysis
  • Security Event Management
  • Alerting & Dashboards

DevOps & Automation

  • Docker & Kubernetes
  • Git & CI/CD (GitHub Actions)
  • Infrastructure as Code
  • API Integration
  • PowerShell & Bash
  • Custom Tooling & Task Automation

Primary Tools & Technologies

Linux Windows Server Active Directory VMware vSphere & ESXi Hyper-V FortiGate pfSense FortiSIEM EMC Networker Data Domain Unity Storage Docker Kubernetes GitHub Actions Bash PowerShell Nmap Nikto

Languages

Arabic – Native English – Advanced French – Advanced

Highlighted Projects

Representative work in SIEM, monitoring, offensive security, automation, DevOps, and resilience.

DevOps · IaC

DevOps Monitoring API Platform

End-to-end DevOps platform featuring a production Flask API, full CI/CD pipeline, Prometheus + Grafana observability stack, and Terraform-managed cloud infrastructure.

  • Built a REST API exposing real-time system metrics (CPU, RAM, disk, network) via Docker with health checks and non-root user.
  • Automated testing, linting, Docker build/push, and zero-downtime deploy to Render with GitHub Actions CI/CD.
  • Deployed Prometheus with 4 alerting rules and Grafana with an 8-panel auto-provisioned dashboard for observability.
  • Defined cloud infrastructure as code using Terraform (Render provider) — parameterized, version-controlled, importable.
Python · Flask · Docker · Prometheus · Grafana · GitHub Actions · Terraform → View on GitHub
Monitoring & SIEM

Enterprise SIEM Deployment & Integration

Deployed FortiSIEM across a virtualized environment to centralize security event collection and correlation for Linux and Windows servers.

  • Deployed FortiSIEM Supervisor & Collector as Linux VMs on vSphere ESXi via vCenter.
  • Installed agents on Windows & Linux VMs for centralized log collection.
  • Built event correlation rules, dashboards, and automated incident detection.
FortiSIEM · vCenter · vSphere & ESXi · Linux · Windows Server
Monitoring

Scalable Real-Time Monitoring & Metrics Pipeline

Deployed a full-stack metrics pipeline using Telegraf, InfluxDB, and Grafana to monitor VPS and Docker container performance in real time.

  • Deployed Telegraf agents across VPS and Docker nodes to aggregate real-time CPU, RAM, and disk I/O metrics.
  • Configured specialized monitors to track container health and application-level performance.
  • Developed comprehensive Grafana dashboards for centralized visibility of infrastructure trends.
  • Utilized InfluxDB as a time-series database for efficient high-resolution data storage and querying.
Grafana · InfluxDB · Telegraf · Docker · Bash
Offensive Security

Red Team Security Assessment

Internal red team engagement to proactively assess and harden company web applications against real-world attack vectors.

  • Performed penetration tests on internal and external web apps.
  • Identified SQLi, auth bypass, and XSS vulnerabilities.
  • Delivered detailed remediation reports prioritized by risk.
  • Drove collaborative fixes with development teams, reducing security risk.
OWASP · Burp Suite · Metasploit · Web App Testing
Automation

Automated Security Assessment Toolkit

Custom toolkit integrating classic scanners and AI to run scheduled security assessments and generate prioritized reports.

  • Combined Nikto & Nmap for automated vulnerability scanning.
  • Integrated Google Gemini API to analyze results and highlight critical issues.
  • Scheduled scans on a VPS, sending weekly email reports with remediation steps.
Python · Bash · Nikto · Nmap · Google Gemini API
Resilience

Enterprise Backup System Implementation

Designed and implemented a secure, automated backup strategy for critical business applications with reliable monitoring.

  • Automated encrypted backups to remote VPS using Bash and Rclone over SSH.
  • Achieved 100% reliability with zero data loss incidents.
  • Added email alerts for backup failures and transfer interruptions.
Bash · Rclone · SSH · Cron · Mutt
DevOps

Docker App Deployment & Restoration Automation

Bash-based automation toolkit for deploying Docker applications with Nginx reverse proxy and SSL certificate provisioning via Let's Encrypt.

  • Created a Bash script to automate the deployment of Docker apps.
  • Developed a script to restore Docker apps from backups.
  • Automated the setup of Nginx configuration for Docker apps.
  • Integrated Let's Encrypt for automated SSL certificate provisioning.
Docker · Bash Scripting · Nginx · Let's Encrypt
Development

Web Scraping Tools

Collection of Python-based web scrapers to automate data collection from job boards, automotive sites, and e-commerce platforms.

  • Job Finder: Automated collection of job listings from multiple online sources.
  • Cars Collector: Scraped car details from automotive websites.
  • Product Getter: Extracted product data from e-commerce platforms.
Python · Web Scraping · BeautifulSoup · Requests

Contact

Interested in collaborating, hiring, or discussing security & infrastructure? Let’s talk.

Reach Out

I’m available for roles and projects in security engineering, systems engineering, IT operations, and audits — on-site in Algeria or remote.

Quick Message