Khalid Alamoudi

Indra, Riyadh, Saudi Arabia

Engineering role covering multiple technical fields across Indra's project portfolio in Saudi Arabia, with a specialist focus on the cybersecurity systems embedded within every installed solution. On the SDCC project I worked within the Cybersecurity team to design, build, integrate, and operationalize the full cybersecurity infrastructure and its controlled laboratory environment, which serves as the platform on which each security solution is configured, tested, and validated before deployment into the wider SDCC environment.

Network architecture and segmentation

• Designed and configured the complete Huawei switching infrastructure for the cybersecurity environment, covering VLAN architecture, trunk and access connectivity, link aggregation, and the interconnection of security appliances, servers, firewalls, and network components.
• Engineered segmented network zones for management, cybersecurity, DMZ, and project specific environments, enforcing separation of duties and controlled traffic flow between security domains.
• Implemented redundant and highly available connectivity, including LACP link aggregation and dedicated interconnects for clustered high availability security appliances.
• Deployed and supported secure out of band management connectivity for network devices, servers, virtual infrastructure, and cybersecurity appliances.

Virtualization and server infrastructure

• Built the physical server infrastructure from bare metal, including the installation and configuration of VMware ESXi and vSphere with vCenter, together with the associated virtual networking.
• Provisioned and configured virtual machines for a wide range of cybersecurity platforms, coordinating with each solution engineer on resource allocation, network placement, operating system and appliance installation, and deployment troubleshooting.
• Configured and hardened RHEL Linux and Windows Server systems supporting the environment, covering networking, services, certificates, authentication, repositories, and integration between systems.

Cybersecurity platform integration

• Delivered the underlying infrastructure and integration for the full security technology stack, taking Fortinet, FortiAnalyzer, Tenable, FireMon, Cribl, Wallix Bastion, Forescout NAC, Ivanti, and Trellix from rack and virtual machine provisioning through to operational connectivity.
• Implemented Active Directory integration, LDAP and LDAPS authentication, certificate and PKI services, DNS, and NTP as the shared foundation required by every security platform.
• Established the cybersecurity laboratory in full, including engineering workstations and controlled management access, enabling authorized personnel to administer the environment securely.

Fault resolution and cross team delivery

• Performed fault isolation from end to end across the whole stack, covering switching, VLANs, LACP, routing and firewall connectivity, DNS, NTP, certificates, virtualization, operating systems, and application layer connectivity, acting as the escalation point for infrastructure related blockers.
• Partnered on a daily basis with individual cybersecurity engineers to plan, implement, test, troubleshoot, and validate their assigned platforms, shortening the time taken to bring each solution into operation.
• Contributed to daily coordination meetings with the Cybersecurity team to track implementation progress, resolve technical issues, manage change, and confirm that the environment met project requirements.

PEAC, Florida, United States

Led the design and development of full stack and mobile applications in a fast paced, solutions oriented environment, working with multidisciplinary teams on maintainable, high performance systems.

Media management platform

• Built a high performance internal web application to organize and serve a large media library of images and video.
• Implemented efficient thumbnail generation, full resolution viewing, and in browser video streaming for seamless access to extensive content libraries.
• Optimized database queries and media delivery pipelines to sustain high throughput access with minimal latency.

SMS to email Android application

• Developed a secure background Android service that forwards SMS messages according to configurable rules.
• Integrated Gmail SMTP with Firebase and Android background services to guarantee uptime and reliable real time delivery.
• Implemented keyword filtering and delivery verification so that messages reach authorized recipient inboxes only.

Technologies: PHP, JavaScript, MySQL, Kotlin, XML, Firebase

Personal project

• Architected and built a complete forum platform from the ground up, including authentication, threaded discussions, moderation tooling, and profile management.
• Designed a secure RESTful API and scalable MongoDB schema supporting nested threads, role based access control, and granular post permissions.
• Developed a modular, responsive React frontend with route handling, local caching, and dynamic media rendering, reducing redundant server calls through application versioning and intelligent caching.
• Engineered dynamic media and icon delivery through encoded endpoints for improved speed and flexibility.

Technologies: React, Node.js, Express.js, MongoDB, Mongoose, JavaScript, HTML, CSS

Academic team project

• Designed and implemented the entire backend, enabling secure data flow across three role separated portals for parents, administrators, and clinicians.
• Developed the clinician portal frontend for real time tracking of infant dietary intake and management of patient records.
• Enabled dynamic adjustment of nutrition plans and data governance through the administrative interface.

Technologies: Java, TypeScript, Angular, Spring Boot, MongoDB, REST API, Postman

Florida International University, Miami, Florida, United States

Relevant coursework: data structures, algorithms, operating systems, software engineering, machine learning, database systems, and networking.

DeepLearning.AI and Coursera

Neural networks and deep learning, hyperparameter tuning, regularization and optimization, structuring machine learning projects, convolutional neural networks, and sequence models.

Self directed

Next generation firewalls at both edge and data center, SIEM monitoring and log pipeline design, malware analysis through sandboxing, Zero Trust architecture covering MFA, IAM and PAM, the NIST and ISO 27001 compliance frameworks, threat prevention including DDoS and ransomware, vulnerability management, and network security controls including data diodes and patch automation.