Home About Services Projects Blog Contact Policy
IT Infrastructure & Network Security

IT Infrastructure & Network Security for companies that cannot afford downtime

IT infrastructure and network security is the design, setup and protection of the systems a company runs on: its network and Wi-Fi, firewall, servers and Active Directory, CCTV cameras and backups. It is for companies in Egypt and the Gulf that have grown beyond an internet router and a few PCs but do not have a full IT department. The outcome is a network that is organised, documented and hard to attack, with backups that can bring the business back after a failure or ransomware attack.

  • IT Infrastructure Engineer since 2021
  • FortiGate, WatchGuard, Windows Server and Active Directory
  • Honest ransomware recovery advice, no false promises

8+

Years of experience

450+

Projects delivered

78

Live websites

100

PageSpeed score of this site

View portfolio

What’s included

Network design and Wi-Fi

Structured networks with managed switches, VLANs that separate staff, servers, cameras and guests, and business Wi-Fi with proper coverage and guest isolation.

FortiGate and WatchGuard firewalls

Next-generation firewall setup with intrusion prevention, web filtering, application control, clean policies, current firmware and management closed to the internet.

Secure remote access

VPN access for staff and branches with multi-factor authentication, instead of risky port forwarding for remote desktop, NAS or cameras.

Windows Server and Active Directory

Domain setup and clean-up, group policies, file shares and permissions, local admin password management and planned upgrades from older Windows Server versions.

CCTV and IP camera systems

Site survey, IP cameras and NVR installation, PoE switching, recording retention, secure mobile viewing and cameras isolated on their own network.

Ransomware protection and backups

Endpoint protection (EDR), email security, patching and 3-2-1-1-0 backups with one offline or immutable copy that attackers cannot reach.

Incident response and data recovery

Containing hacks and ransomware, investigating how attackers got in, restoring systems and checking whether encrypted data can realistically be recovered.

IT support and monitoring

Ongoing support for users, devices, servers and Microsoft 365 or Google Workspace, with monitoring, updates and up-to-date documentation.

How it works

  1. 1

    Free consultation

    We discuss your offices, number of users, current problems and what the business cannot afford to lose.

  2. 2

    Site survey and security assessment

    I review the network, firewall, servers, Active Directory, cameras and backups, and list the risks in order of priority.

  3. 3

    Design and custom quote

    You receive a clear plan, the hardware and licences needed, and a custom quote for the work, with no pressure to replace what still works.

  4. 4

    Installation and configuration

    Equipment is installed and configured in planned stages, outside working hours where needed, so the business keeps running.

  5. 5

    Handover and ongoing support

    You get documentation, passwords in a secure vault and staff guidance, with optional monthly support and monitoring.

Why work with me

Real enterprise experience

Since 2021 I have designed, implemented and maintained networks, servers and security systems for an international shipping agency, where uptime and business continuity matter every day.

Network, server and web in one

I manage IT for academies and companies and also secure websites and servers, so your firewall, Active Directory, email and website are protected as one system.

Security-first training

Bachelor of Computer Science, an IT and IT Security diploma and CCNA networking training, with hands-on FortiGate, WatchGuard and Windows Server work.

Honest advice

I tell you what really needs replacing and what does not, and I never promise to decrypt ransomware data unless recovery is actually possible.

Who is this for

  • Small and medium companies without an in-house IT department
  • Offices opening a new branch or moving to new premises
  • Companies hit by ransomware, a hack or a serious outage
  • Factories, warehouses, clinics, schools and shops that need CCTV
  • Businesses still running Windows Server 2016 or older
  • Companies preparing for data protection requirements in Egypt or Saudi Arabia

What I check in a company IT assessment

Most small and medium companies I work with have the same pattern: one flat network where every laptop, printer, camera and guest phone can see everything else, a firewall still on old firmware, and a camera system opened to the internet years ago. Everything works until the day it does not. My assessment looks at:

  • Firewall firmware, rules and whether management is exposed to the internet.
  • Network segmentation: are cameras, guests, staff and servers separated by VLANs?
  • Remote access: VPN with MFA, or open ports for remote desktop, NAS and NVR?
  • Active Directory hygiene: admin accounts, old users, password policy and group policies.
  • Backups: how many copies, where, how old, and has anyone tested a restore?
  • Default passwords on cameras, switches, printers and access points.

The full checklist is in my guide to securing a company network and CCTV cameras.

CCTV installation done securely

Cameras protect your premises, but badly installed ones become a way into your network. Botnets such as Mirai still recruit DVRs and cameras through old flaws and default passwords.

Analog/HD DVR systemIP cameras with NVR
Image qualityGood for basic coverageHigher resolution and better analytics
CablingCoax plus separate powerOne network cable with PoE
ExpansionLimited by DVR channelsFlexible and easier to scale
Security needsSecure the DVR and its remote accessSeparate VLAN, firmware updates, no default passwords

Whichever you choose, I place cameras on their own network, change every default password, keep firmware current and provide remote viewing through a VPN or the secured vendor app, never an open port.

Ransomware: prevention first, honest recovery second

Verizon's 2026 Data Breach Investigations Report found ransomware in 48% of breaches, and exploited vulnerabilities are now the most common way in. Prevention is patching, MFA, EDR, email security and backups that attackers cannot delete. If your files are already encrypted, recovery is possible only sometimes: from clean backups, from surviving snapshots or shadow copies, or with a free decryptor from the No More Ransom project when one exists for that ransomware family.

If you are hit by ransomware, disconnect affected machines from the network but do not wipe or restart them, and keep the ransom note and a few encrypted files. They are needed to identify the ransomware and check whether a decryptor exists. I do not recommend paying the ransom, because it does not guarantee your data back.

Read the full plan in my ransomware protection guide and why attacks are getting faster in AI-powered cyber attacks.

Upgrades that cannot wait

Microsoft ends support for Windows Server 2016 on 12 January 2027, after which it receives no security updates. Companies in Egypt also need to prepare for the Personal Data Protection Law (Law 151 of 2020), and Saudi companies for the PDPL, both of which expect reasonable security for personal data. I plan these upgrades alongside your servers and hosting and website security, so nothing is left behind. Book a free consultation to start with an assessment.

Frequently asked questions

Can you recover files encrypted by ransomware?

Sometimes. Data can be recovered from clean backups, from snapshots or shadow copies the attacker missed, or with a free decryptor if one exists for that ransomware family on No More Ransom. Many modern variants cannot be decrypted without the key, so I first identify the ransomware, then tell you honestly what is possible. I do not recommend paying the ransom.

Which firewall is better for a company, FortiGate or WatchGuard?

Both are solid next-generation firewalls. The right model depends on the number of users, internet speed with security inspection enabled, VPN needs, branches and the licence budget. More important than the brand is correct configuration, current firmware and management closed to the internet.

Do you install CCTV cameras for companies?

Yes. I do a site survey, recommend IP cameras and an NVR with the right storage for your retention period, install and configure them, isolate them on their own network and set up secure remote viewing on mobile.

How much do IT infrastructure services cost?

It depends on the number of users and sites, the equipment needed and whether you want one-off work or ongoing support. I give a custom quote after a free consultation and, where needed, a site survey. Hardware and licences are listed separately so you can see exactly what you pay for.

Do you work with companies outside Egypt?

Yes. Firewall, server, Active Directory, Microsoft 365 and security work can be done remotely for companies in Saudi Arabia, the Gulf and the UK. On-site work such as cabling and camera installation is arranged case by case.

Is your company network really secure?

Send me a WhatsApp message for a free consultation and a custom quote for your network, servers, cameras or ransomware protection.

Related guides

Other services