Oussama Ouaffaq

IT security professional with 5+ years of hands-on experience across network security, infrastructure, and IT operations in telecom, enterprise, and healthcare environments. Currently investigating Active Directory attack chains, administering Microsoft Defender for Endpoint, and producing executive-level security reporting in a healthcare setting governed by PHIPA. Skilled in SIEM (Splunk, ELK), the Microsoft security stack (Defender for Endpoint, Entra ID, Intune, ADAudit Plus), firewall management (FortiGate, Palo Alto), and incident response.

Cyber Security

Analysis graduate (Algonquin College, 2026); CCNA and Palo Alto Networks Certified Associate. Bilingual (French/English). Targeting SOC Analyst and Security Operations roles.

IT Junior Security Administrator at Carefor Health & Community Services (2026-06 – Present)

• Investigate and triage Active Directory security anomalies using ManageEngine ADAudit Plus; analyzed and dispositioned a five-stage suspected attack chain (username enumeration, brute force, PowerShell Script Block Logging tampering, DCSync activity, automated off-hours patterns), distinguishing confirmed legitimate activity from findings requiring escalation
• Administer Microsoft Defender for Endpoint, including device discovery scanning and alert triage; support identity security through Entra ID MFA verification and Intune/GPO policy enforcement
• Analyzed a KnowBe4 phishing simulation dataset covering the organization's 50 highest-risk users; delivered an interactive findings dashboard and executive presentation using role-based reporting to protect individual staff privacy
• Researched an active ransomware threat group and authored an environment-specific threat runbook with Sigma detection rules, KQL hunting queries for Defender, and hardening recommendations prioritized by impact-to-effort
• Authored incident response runbooks and a false-positive validation plan; produce security reports and presenter guides for both technical and non-technical stakeholders
• Contribute to the protection of Personal Health Information (PHI) in accordance with PHIPA; configured SharePoint activity auditing using the Microsoft Purview unified audit log
• Support the staff cybersecurity awareness program and participate in internal/external security audits and associated documentation

Network Deployment and Telecommunications Technician at CONNEXCEL (AXIANS) (2025-05 – 2025-09)

• Designed and deployed enterprise-grade network cabling and hardware infrastructure for 10+ client sites
• Provisioned and configured routers, switches, and high-speed equipment supporting 500+ users
• Applied security controls through firewall rules, VLAN segmentation, and granular ACL-based permissions
• Authored technical runbooks and post-deployment documentation ensuring network uptime above 99%
• Standardized deployment procedures, reducing installation timelines by 20% across managed projects

IT Support and Systems Analyst at Tech Domain Canada (2024-12 – 2025-05)

• Administered Active Directory and Entra ID (Azure AD) for 300+ user accounts: full user lifecycles, GPOs, automated provisioning workflows, and enforcement of security group policies
• Diagnosed complex connectivity issues across LAN/WAN environments, VPN tunnels, and wireless infrastructure using Wireshark
• Performed vulnerability scans, managed patch deployment across server fleets, and responded to phishing and malware alerts
• Oversaw provisioning, imaging, deployment, and repair of laptops, mobile devices, and enterprise peripherals
• Authored standard operating procedures (SOPs) and technical guides for internal knowledge bases

Network and Telecommunications Specialist at MAROC TELECOM (2022-01 – 2024-07)

• Designed and maintained carrier-grade national networks serving millions of subscribers; sustained 99.9% uptime through dynamic OSPF/BGP routing and redundancy protocols (HSRP, VRRP)
• Configured advanced firewall rules, managed complex access control lists, and deployed VPN tunnels protecting critical infrastructure
• Orchestrated integration of multi-vendor technologies (FTTH, VoIP, LTE/5G) across Huawei, Nokia, and Ericsson platforms
• Performed in-depth packet analysis using Wireshark and SIEM tools to resolve latency issues and conduct proactive threat hunting
• Diagnosed hardware failures and oversaw installation of fiber-optic and satellite equipment

Network and IT Technician at INFODIS (2020-10 – 2022-01)

• Installed and configured routers, switches, wireless access points, and telecom hardware across client sites
• Secured network infrastructure through VPN tunnels, firewall policies, and regular patching to prevent unauthorized access
• Deployed and maintained Windows Server and Linux systems in virtualized environments (VMware, Hyper-V)
• Performed routine backups, participated in disaster recovery operations, and maintained architecture and configuration records for audits

Cyber Security Analysis Diploma in Cyber Security Analysis – Algonquin College (2025-09 – 2026-05)

Bachelor's Degree in Computer Systems Engineering – National School of Applied Sciences (ENSA) (2022-09 – 2023-07)

Specialized Technician Diploma in Computer Networking – OFPPT (2018-09 – 2020-09)