- Lead the design, configuration, and maintenance of enterprise network infrastructure, keeping every connected system available, performant, and secure.
- Administer Active Directory environments: user authentication, group policies, DNS, DHCP, and cluster management for seamless domain operations.
- Configure and maintain Cisco core & distribution switches, routers, and NMS devices, including DMZ and data-center infrastructure.
- Operate Splunk, Trellix, WhatsUp Gold, and Nozomi for continuous monitoring, threat detection, and diagnostics.
- Lead the deployment and integration of CCTV and access-control systems, working with field technicians to make sure everything comes up reliable and compliant with project standards.
- Integrate and manage voice, video, and data networks for centralized monitoring and operational control.
- Administer the Elastix SIP Server and VoIP phone systems, keeping voice communication stable across multiple facilities.
- Tune QoS policies so mission-critical voice, video, and data traffic gets priority across industrial zones.
- Provide secure remote access for authorized users via FortiGate firewalls, SSL VPN, and multi-factor authentication.
- Work with cybersecurity, IT, and operations teams to stay compliant and enforce network security best practices.
Abdulrahman
Alkhaldi
Jubail Industrial City, Saudi Arabia
I design, secure, and run enterprise networks for a living, mostly in industrial environments where a dropped link means real downtime. My background spans Cisco, Huawei, Juniper, and Aruba platforms, plus firewalls, VPNs, SIEM monitoring, VoIP, CCTV, and VSAT, across RCJY and Aramco. The approach is simple: build for redundancy, monitor everything, and keep things running.
About me
I'm a network and system integration engineer, and for the last few years I've had my hands on the networks that keep large industrial sites running. That means designing and securing infrastructure built on Cisco, Huawei, Juniper, Aruba, and Hughes (VSAT/NMS), and running the day-to-day: firewalls like FortiGate and Juniper, monitoring with Splunk, Trellix, WhatsUp Gold, and Nozomi, and core services like Active Directory, DNS, and DHCP.
Unified communications is another area I know well, especially Cisco CUCM and SIP-based telephony. I've also integrated CCTV, VPN, and RF systems into production networks. I approach every deployment the same way: make it redundant, keep it secure, and don't let it fail quietly.
Designed, secured, and ran high-availability networks across large enterprise and industrial sites where downtime isn't an option.
FortiGate SSL VPN, IPSec VPNs, OTP-based MFA via FortiAuthenticator, and NAC policies, applied as defense in depth.
QoS tuning, redundancy, HA clustering, and disaster recovery planning, built into systems that can't afford to stop.
Professional experience
My career has moved between big industrial names: national oil and gas operations at Aramco, and city infrastructure with the Royal Commission for Jubail and Yanbu. Each role gave me more ownership over network design, security, and integration.
- Designed and implemented VSAT networks for Aramco rigs, installing and configuring Hughes systems to give remote operations reliable satellite connectivity.
- Monitored and optimized RF signals to keep links stable between remote terminals and the central satellite hubs.
- Configured and maintained EIGRP, OSPF, and BGP for efficient, resilient data flow across the network.
- Administered and secured Juniper firewalls and Aruba switches in high-performance, protected environments.
- Supported VoIP systems and remote troubleshooting alongside senior engineers.
- Used NMS, NetCol, Grafana, and Splunk for monitoring, diagnostics, and network health tracking.
- Managed and enforced IPSec VPNs and security policies to safeguard data transmission and access.
- Handled NOC operations: ticket resolution, performance analysis, and fault management to minimize downtime.
- Chased down RTU communication issues before they became outages, coordinating with the Gateway Team to keep field communications secure.
- Processed service requests through SAP and CRM systems, keeping response times short and customers satisfied.
- Designed and deployed a new Active Directory domain, migrating users, groups, and data from legacy systems into a modern, secure, centralized environment.
- Managed AD services: user accounts, OU structure, Group Policies, DNS, DHCP, and Domain Controllers, keeping authentication stable and access controlled.
- Configured and troubleshot Cisco infrastructure: OSPF, EIGRP, BGP, VLANs, trunking, and STP for reliability and performance.
- Administered Office 365: Exchange Online, Teams, mailboxes, and licensing for smooth communication and collaboration.
- Configured and maintained Cisco firewalls, wireless access points, and security policies to protect user connectivity.
- Supported VoIP on Cisco Unified Communications Manager (CUCM): SIP trunks, call routing, and QoS for clear voice service.
- Provided end-user technical support and troubleshooting, keeping systems up and issues resolved fast.
Cooperative training
Cooperative training with RCJY's Infrastructure Technology Department during my bachelor's program at TCTI. Early hands-on exposure to enterprise switching, VoIP, and end-user support in a live production environment.
- Supported RCJY facilities as a Network Technician within the Infrastructure Technology Department of Jubail.
- Implemented and configured internet telephony protocols (H.323, SCCP, SIP) for multiple schools under RCJY, and supported CUCM and Cisco IP phones, keeping voice services reliable.
- Troubleshot and repaired multi-layer switches across core, distribution, and access layers (including Power over Ethernet), keeping network operations stable.
- Worked with advanced routing protocols: OSPFv3, EIGRP, RIPng, and MP-BGP for efficient route distribution and performance.
- Assisted in deploying and troubleshooting MPLS networks for secure, scalable connectivity across distributed locations.
- Provided end-user technical support and managed PSTN and voice connectivity day to day.
Selected projects
A selection of the work I've done across network engineering, network security, and system integration, all of it deployed in real production environments.
01Network Engineering
VSAT Network Design & Implementation — Aramco Rigs
Designed and deployed VSAT networks for Aramco's remote rig operations, then monitored and tuned RF signals to keep remote terminals and the central satellite hubs talking reliably.
Enterprise VoIP Infrastructure — Cisco CUCM
Set up and ran enterprise VoIP on Cisco Unified Communications Manager: SIP trunks, call routing, and QoS, so multiple facilities got clear, stable voice service.
Network Design & HA Validation Lab
Built a virtual lab (EVE-NG / GNS3) to design and test enterprise topologies: multi-vendor routing, switching, high availability, and security policies, all validated before anything touched production.
02Network Security
Secure Remote Access — FortiGate SSL VPN & MFA
Delivered secure remote access on FortiGate SSL VPN with multi-factor authentication, so authorized users could connect from anywhere without loosening access control.
CCTV & Access Control Systems Integration
Led the full deployment and integration of CCTV and access-control systems across large industrial sites, working with field technicians to make sure everything worked reliably and met project standards.
Site-to-Site VPN Implementation
Set up site-to-site VPNs between facilities: IPSec tunnels, encryption, and security policies, so data moved between sites securely and stayed available.
03System Integration
Converged Voice, Video & Data Platform Integration
Brought voice, video, and data networks together into one operational platform for centralized monitoring and control across multiple facilities. That meant Active Directory, core/distribution/access and VSS switching, monitoring with WhatsUp Gold, Splunk, and Trellix, WSUS patching, and Acronis disaster recovery.
Skills & technologies
I've worked across the full stack, from switching and routing basics to SIEM operations, unified communications, and satellite systems.
01 Enterprise Network Design
02 Firewall & Security
03 Routing & Switching
04 AD, DNS, DHCP & Clusters
05 VPN & Access Control
06 Network Monitoring
07 VoIP Systems
08 CCTV & Access Control
09 Availability & Recovery
10 Operations & Leadership
Certifications
Cisco Certified Network Associate
Routing and switching, network fundamentals, security, and automation.
Cisco Certified Specialist — Enterprise Core
Enterprise network architecture, virtualization, infrastructure, and automation.
Academic background
Bachelor's Degree — Network Engineering
Diploma — Network Administration
Let's build something reliable.
I'm open to network engineering and system integration roles. If you're hiring, or you've got a network problem worth solving, get in touch.