/home
SECURE SYSTEMS.
CONNECTED NETWORKS.
BUILT FOR RESILIENCE.
I work with European teams to maintain secure connectivity and reliable network operations across distributed infrastructures, using Cisco, Fortinet, Zscaler and Linux.
My focus is on IPSec VPN, secure remote access, firewall operations and production troubleshooting. I investigate issues across network and infrastructure layers, coordinate with the relevant teams and providers, and help restore business-critical services.
Current mission: Ahold Delhaize via Econocom — distributed infrastructures across 600+ stores in Belgium and Luxembourg.
Multilingual: English · French · Dutch · Arabic
Fully remote capable. Security-driven. Operationally disciplined.
CURRENT CONTEXT
Role: Network Security Consultant
Mission: Ahold Delhaize via Econocom — Belgium and Luxembourg.
Primary Focus: Secure connectivity, IPSec VPN, Zscaler ZIA / ZPA, firewall operations and production troubleshooting.
CORE STACK
WORKING MODE
Production-focused, full-remote delivery with structured documentation, change discipline and controlled implementation practices. Languages: English · French · Dutch · Arabic
APPROACH
Every configuration change, firewall rule and access path is handled with structured validation, impact awareness and clear communication.
SECURITY MINDSET
Security is not a feature — it is a structural principle. Segmentation, policy consistency and predictable traffic flows preserve operational integrity.
TOOLING & AUTOMATION
Python and CLI-based tooling for automation, validation and operational efficiency — structured configs (YAML/JSON) and repeatable workflows ensuring consistent deployments.
// at a glance
Network Security Consultant
Role
Secure connectivity · VPN stability · Firewall operations.
CCNP Security – SVPN
Certified
Large-scale VPN and secure remote-access environments.
Operational experience
10+ years
Experience across security systems, critical incident response and IT infrastructure operations.
Belgium · Full Remote Ready
Mode
Structured documentation, change discipline and controlled execution.
$ traceroute secureit-hub.com
hop 1: user_location [edge_client]
hop 2: vpn_gateway [encrypted_tunnel_established]
hop 3: secureit_infra [routing_clean · fw_policies_ok]
hop 4: secureit_services [monitoring_online · logs_streaming]
hop 5: secureit-hub.com [app_alive · tls_ok]
status: reachable ✓
signal: stable
notes: path_encrypted=true, packet_loss=0%, ready_for_remote_work