State-certified engineer working in cybersecurity consulting, where cloud infrastructure, identity and risk meet.

• 🔐 I assess cloud and application security posture against CIS Benchmarks and vendor baselines
• 🪪 I design and audit identity governance — Entra ID, Conditional Access, RBAC, least privilege
• ⚙️ I automate the parts of security work that shouldn't be done by hand twice
• 📊 I turn findings into remediation plans a team will actually ship, not raw finding dumps
• 🌱 Currently going deeper on Linux, Kubernetes security and detection engineering
• 🎓 State Engineering Degree, École Mohammadia d'Ingénieurs (EMI), Rabat
• 💬 Ask me about cloud posture management, CSPM automation, or DevSecOps pipelines

☁️ Cloud & Platform

🔐 Security

⚙️ Engineering

A framework for tailoring cloud security posture management to an organisation's own risk model, with automated control evaluation and findings forwarded into Cortex XSIAM for triage.

CSPM  Cortex XSIAM  Python  Multi-cloud

End-to-end Jenkins pipeline with a security gate at every stage — SonarQube static analysis, OWASP Dependency-Check, and Trivy filesystem and image scanning — deploying to a hand-built Kubernetes cluster on AWS EC2.

Jenkins  SonarQube  Trivy  Kubernetes  AWS

• 👥 IT Cell Lead, Tel&Power Club — led a team of 15, ran technical workshops, mentored project teams
• 🎤 Great Debaters Club — competed and won in English and French; structured argument is the same muscle as a good risk write-up
• 🌍 Languages — Arabic, French, English