Cyber security

Location:

Riyadh, Riyadh Province, Saudi Arabia

Salary:

7000sar basic permonth

Posted:

January 03, 2017

Contact this candidate

Resume:

RESUME

MOHAMMED WAHAJUDDIN ASHRAF Email id:-*************@*****.***

Btech:- Engineering *************@*****.***

P.G.D.M:- Marketing & Finance Ph no:-050*******

Career Objective: “To be a part of the challenging team which strives for the better growth of the organization and which explores my potential and provides me with the opportunity

to enhance my talent with an intention to be an asset to the company.”

Personal Details:

Name:- MOHAMMED WAHAJUDDIN ASHRAF Marital Status: Married

Fathers Name:- MOHAMMED EJAZUDDIN ASHRAF

Gender: Male Date of Birth: 10/02/1984 Language Proficiency: English, Hindi, Arabic

Contact Address:- orchid Building, Permanent Address:- C/o Dr Ejaz Ashraf, Ahle

Altakhassusi Street Hadis Lane, Church Road

Riyadh : 13315 Ranchi: 834001

Riyadh, Saudi Arabia Jharkhand, INDIA

Contact:- (Mobile) 050*******

Email id:- *************@*****.*** Passport No:- N5035850

Work Experience

Company Name

Job Title/ Description

Working Period

Motion Technology

Design Engineer/Instrumentation & Automation Analytical Electrical Engineer

November 15- Till Date

Design Engineer

Prepeare standards and review the Design/Specification of Electrical Protection System for EHV substations

Prepare and review of SOW/Specification, and Tender review

Review of Protection scheme, CT/VT, Relay Setting and Configuration, etc. for new Substations/network

EHV Network System and Protection Study using MiPower Software

Protection Fault Analysis & Diagnosis and Recommendation for System

Improvements/Modifications

ISO Internal Auditor,

Responsibility

AutoCAD Layout / Section view drawing of high voltage substation from 11 kV to 132 kV.

Design of HV & EHV GIS Substations.

Knowledge in Engineering Specification and Standards (IEC, IEEE, ANSI, SEC, IS etc.).

Substation Calculation: Earthing mat, CT/VT Sizing, Battery sizing, Cable tray loading etc.

Power Cable (HV and LV) sizing and calculation.

Technical Support. Problem solving for GIS.

High Voltage system design, preparation of single line diagrams for the Gas Insulated switchgears up to 420 KV

Generation of SLD (Single Line Diagrams) & the layout design for the GIS using 3D CAD tools

General Technical Parameters, Design Memorandum and Customer Technical Specifications preparation

Equipment sizing and configuration for the GIS

Earthing design for the GIS substation

Detailed engineering (Primary Engineering) from the Customer technical specifications

Foundation design and cable tray calculations for the GIS & Design & Develop Catwalk for the GIS based on the customer requirement.

HV cable calculation and cable layout/cable tray details and Scheduling.

Control Panel & Relay panel schematics preparation.

Substation interlocking logic diagram preparation.

Preparation of SLD and LCC over all view diagrams.

Preparation of Mimic diagram with dimension and Alarm signals.

Preparation of check list and technical Specification of individual components.

Preparation of Control panel BOQ and Site accessories.

Control Cable sizing and length Calculations and cable accessories selections.

Load calculation AC & DC.

Ability to select the components like (MCB, Contactor, Relays, connectors, etc.)

Coordination and support for testing and commission of Control & relay panel.

Selection of BCU, Metering, Partial discharge (PD), Control Switch device (RPH) I/O cards etc.

Preparation of Software and Hardware interlocking drawing/ table for different type of bay configuration

Reading electrical design specifications and technical drawings.

Preparation of Electrical Procedures for Installation, testing & commissioning of high voltage substation.

Preparing Cable schedule for substation equipment wiring.

Design of Shielding protection, rigid Bus Bar, Ear thing, Indoor and Outdoor lighting of Substation.

Attending meetings to solve any technical issues.

Electrification of Residential Buildings.

Estimation of materials required for Installation of Substation Equipment.

Involved Projects

1. Supply, Delivery, Installation & commissioning of 66/11kV, 6/7.5MVA Transformer Bay at SOHAR House – GOD/2065/066-07

2. Supply, Construction and Installation of 132kV SOHAR Substation ICB-PS 01/2009.

3. Design, Supply, Installation, Testing & Commissioning of Capacitor Banks in Grid S/S PFIP -066/67-01

4. Supply delivery & comm of 66/11kV FDRS from Tareef & Wadi Sallan primary substation GOD/2066/67-05

5. Supply, Delivery & Comm.of 66kV SF6 CB, CTs & CVTs at SOHAR S/S HGD/2067/068-01

6. Supply, Delivery, Inst, Testing & Comm of 132/33kV transformer bay at SOHAR – GOD/2067/03

7. Supply and Construction of 132kV line bays at SOHAR – HK2S-SCLP-067/68-02

8. Design, Supply, Delivery, Installation, Commissioning and Testing of 6/8 MVA 33/11Kv SOHAR

– PTSCD-067/68-05 M S/S

9. Supply, Delivery, Inst & Comm of 132 kV LA & 66kV CVT at SOHAR – KGD/2068/069-01

10. Design, Supply, Delivery, Installation, Testing & Commissioning of 11kV Capacitor bank in different S/S– TSD-067/68-02 HVCAP

11.Supply, Delivery, Inst., Testing & Comm. of 12kv outgoing VCB switchgear panels at SOHAR /SRHGPCL/RGHEP/068/69/CP-2

12. Supply, Delivery & Commissioning of 66/11kv Transformer Bay - GOD/2068/069-08

13. Perform required maintenance and tests for EHV &HV GiS Substations.

14. Commissioning for Siemens protection relays,

Supervision at installation & start up for EHV power transformers

SCADA Engineer

Automation

I am one of the engineers who is responsible to make review of SAS (Substation Automation System ) design with protection for substations 380 kV/132 kV/33 kV/13.8 kV according to my experience in commissioning of protection and automation system of high voltage networks with generation power plants and substations.

I have good experience now for

ABB DCS 800XA

ABB SAS ( microscada 600)

Siemens SAS ( Sicam Pas ),

Alstom SAS ( DS Agile ).

IET Tool and IED Configuration

.SCD File Generation

IEC61850 (GOOSE, MMS)

Control builder

SCADA (Supervisory Control and Data Acquisition)/Smart Grid

Involved with operations, maintenance and engineering of SCADA Master Station hardware systems, and SCADA Remote Terminal Units.

Configuration and diagnostic of the RTU,SCADA communication protocols

DNP3, Modbus, IEC60870-5-101/104, NTP, SNMP or any protocol

Configure the HMI, Historian, Alarms, Events

SCADA development experience on preferable platform of SEL-RTAC/DAP100/GE-iFIX, Cimplicity, Wonderware, Networking basics.SEL-RTAC, Wonderware system and products

• Also, as part of SCADA system design, was involved in determining Electric Power Grid requirements to be interfaced as part of SCADA Master Station design (such as new substations, power transmission line requirements and other requirements to be placed in Master Station “Builds” for new SCADA systems).

To deploy and manage PV Automated Management systems that help in monitoring and controlling various Plant Components and Operations centrally, including trackers, inverters, sub-stations and meters.

To initialise the Monitoring system at installation stage with plant design data: PV panels' peak power, inverter specifications, manufacturer-provided electric parameters, number of strings, strings length, etc.

To implement and run systems that can log any problem and trigger alarms so that the engineering staff can fix or change components or fine-tune the process of plant operation.

To generate comparative data of the calculated and the real production figures (supplied by the data logger) to give a precise measure of plant performance and plant health on an on-going basis.

To manage the Remote Communication Interfaces and Protocols that allow computers to access Application-based Data streams generated on sophisticated Data-loggers.

To introduce automated systems that enable dynamic configurations, stand-alone and client-server configurations, redundancy for data-protection, historical and real-time trend analysis as well as advanced alarm management.

SCADA : Vijeo Historian V4.0, RS View32,

WinCC V7.2, PowerLogic SCADA7.40,

StructureWare Power Monitoring (SPM), ION .

SPM for Data Center, Wonderware Intouch

PLC/RTU : Schneiderâ ™s Quantum,

Siemens S7-1200, ABB AC500PM554,

Rockwell's Micrologix 1400,1000,GE-Fanuc.

DCS : Emerson DeltaV DCS/SIS(SLS1508)/ESD

ABB 800xA DCS, Honeywell DCS (C-300).

HMI : Siemens KTP600, Delta B03S211.

VFD : Delta VFD-M.

Protocols : Modbus, OPC, IEC, Profinet, Profibus, Fieldbus

Design, Development, Integration, Implementation, Commissioning and Testing of SCADA, Automation and Energy Management Systems.

Oracle Database Administration.

Modbus, OPC and IEC communication with SCADA.

Integration with third-party systems and application soft wares.

Industrial networking (LAN/WAN).

Support for Application Modules (Availability Based Tariff, Plant Performance Calculation, Merit Order Dispatch, Economic Load Dispatch).

Developing PLC logic using standard languages.

Development of SCADA Reports.

Substation Automation System.

Development of report using I-net crystal reporting tool and SCADA cicodescripts.

Development of reports using MS SQL Server 2008 reporting tool.

Web server configuration for web client.

Designing of HMI Screens using SCADA Software.

Involved in checking the signal status from the PLC by communication with the SCADA.

Energy Meters communication with the HMI using PLC logic.

Logging of SCADA real time data into Oracle Database through scada programming.

Remote Support and training to Site Engineers.

Domain Electrical Engineering.

Preparing the Algorithm from Single Line Diagram and Calculation of Auxiliary Power Consumption in Power Plant using PL/SQL.

Interaction with Clients and understanding of their issues, requirements and resolving them.

Troubleshooting of the System.

Complete preparation of the system for acceptance test.

Preparation of operator user manuals.

Control & integrating all the third party devices in RTU network to acquire real time data.

Responsible for Testing, Commissioning and Implementation of Plant Control Logics and Safety Instrumented System logics.

Conducted FAT, SAT & UAT for Remote Terminal Unit (RTU), Telvent SCADA System, SDH Equipment, Fire and Gas System, Security automation systems and Local/Remote Station Monitoring System at Gas Pipeline Station.

Solely responsible for complete Telvent SCADA/RTU, Telecom and WAN Installation and Commissioning for Compressor Station, M&R Station and MLV Stations along the Gas Pipeline.

Co-ordinate efforts for Daniel Flow Computer installation and sharing Gas Chromatograph Data and Gas Custody Transfer with customer and its interfacing with RTU system.

Designing and installation of LAN for Compressor Stations, and its connectivity with Central Control Room, MPOC, Central through Fiber STM-16/STM-4, Lease Line and VSAT for Redundant SCADA and MIS Network.

Execution and control of planned and unplanned plant maintenance activities of the installed devices and utilities packages triggered by SAP PM Module.

Project planning, execution and co-ordination with related departments and Vendors for smooth Commissioning & Maintenance of the plant activities.

Prepared As-Built Documentation and Drawings.

SAS (Substation Automation Systems)/Smart Grid

• Involved with writing design specifications and scopes of work for construction and implementation of SAS installations involving integrated protection and control (SCADA) for new major substations.

• Performed construction oversight of contractor’s installation of new SAS equipment and systems in new substations.

• Very familiar with the IEC 61850 & 60870 substation communications protocol which is used to communicate between IED’s, and between IED’s and substation communications/computer equipment used in Substation Automation.

• Developing cutting edge HMI/SCADA applications using the Indusoft Web Studio and AB Factory Talk SE/ME to control Agilyx processes.

• Designing and developing control systems for the Agilyx process, Specify control system components based on safety, cost, performance, and reliability.

• Designed factory/plant Control SCADA system, implement, and test including real-time database from ISOFT local factory and central location to company headquarter.

• Designed reporting system using Mat Lab program to automate daily and weekly report.

• Completed real-time reporting system integration to make the real time and historical data available in web and mobile.

• A focus on modularity and scalable design in programming and equipment.

• Ensuring compliance with all environmental, health, and safety regulations.

• Developing Sequence of Operations documentation and control system specifications.

• Leading and participating in the successful completion of Operations Acceptance Tests and Facility Acceptance Tests for control systems and their components.

• Supporting construction and commissioning efforts at customer sites.

• Utilizing and maintaining revision control processes.

• Working with Project Managers to develop objectives, options with costs, recommended option, scope of work, budget and schedule.

• Completing projects on time and within budget that fully satisfy project objectives.

• Guiding technicians and contractors.

• Utilizing industry contacts and relationships, particularly in the area of equipment suppliers, to assist in the procurement of high quality equipment and services.

• Microsoft Windows operation system configuration, including Windows Server, Windows embedded, Windows CE and Windows mobile;

• web-based technologies, such as HTML, PHPADMIN, PHP,HTTP, HTTPS, .NET, ASP;

• SQL for interface with relational databases such as MYSQL and Microsoft SQL Server in Windows and Linux environment.

Control EMS/SCADA Engineer

• Ensured substation databases provide clear, concise, and real time operational field information, which coordinates with EMS/PI databases and structured to match substation equipment.

• Provided sound engineering solutions to hardware, software, and databases associated with Supervisory Control and Data Acquisition (SCADA).

• Design, build, test and maintain Human Machine Interface (HMI) displays used by substation and Distributed Generation applications.

• Design, develop, implement, configure, and maintain OSI PI systems such as ACE, AF, Process books, Data link, SMT3, Core Sight, PIWebpart, Interfaces(OPC, Modbus, DNP3, CSILoggerNet, UFL, PI-PI,RDBMS) supporting a highly reliable generation dispatch, communications, and control center.

• Comply with NERC / CIP standards.

• Design, develop, implement, configure, and maintain systems relating to NYISO, MISO, ERCOT, WECC, CAISO, PJM, BPA, or other system authorities.

• Design, specify, deploy, install, configure, OSI PI system related facilities, desktops, servers, network, and telecommunication equipment in concert with new and existing development pipelines and timelines.

• Configure, test, and monitor protocols such as Modbus, DNP3, OPC, ICCP, TCP/IP and XML

• Design and troubleshoot using Microsoft Scripting languages (i.e. VBScript, VBA, etc).

• Design, test, document, update, and configure system hardware, communications, telemetry, and operating system software to optimize generation systems control and monitor applications specific to project design and operating requirements.

• Create technical requirements, lead technical negotiations and assist in commercial negotiations with service, software, and hardware providers.

• Develop project plans including capital and operational budgets to deliver optimal asset performance and growth.

• Perform technical support optimizing system and network performance developing innovative automated methods for system updates and security tasks.

• Team with development, construction, trading, asset management, and operations to deliver superior performance optimizing profitability.

Programmer(Cyber Security)

Water/Wastewater and Power industries per ISA/IEC 62443 and NERC CIP standards

testing of Web Applications (Java, J2EE, .NET,IIS, PHP, ASP),

Vulnerability Assessment and Exploits,

Secure Programming, Application Code Review,

Scripting Languages (Perl,Javascript,Php),

Mobile applications security assessment

OWASP Methodologies

Database technologies (SQL, Oracle)

Database Architecture review and vulnerability assessments

Database exploits (database dump,)

Assess the security risk of identified events and alert.

Analysis of the Patches released by the vendors.

Review operational logs and event console activity to determine cause of security-related events or to identify potential security related events

Raising incident tickets in the incident tracker tool.

implementation of SIEM tools and platforms

Configure and fine tune various configuration parameters for SIEM tool

ISO 27001 readiness and implementation for different clients

Perform information security risk assessments

Plan and execute Application controls and IT General controls review

Conduct SOX (Sarbanes Oxley Act)ITGC audits

Develop and review security policies, standards and procedures

Advisory offerings on Business continuity and Disaster recovery

Networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.) and application programming/scripting languages (C, Java, Perl, Shell)

Process definition, workflow design and process mapping

Demonstrated ability to contribute to the development of client deliverables and technical content

Installation, configuration and support on Security products from the following vendors like Symantec, McAfee, Sophos, Sonic WALL, Fort iGATE, Trend Micro, Checkpoint, Palo Alto, Fire Eye etc.

Analyze, troubleshoot, and investigate security-related, information systems variances based on security platform reporting, network traffic, log files, host-based and automated security alerts.

Maintain, configure, and analyze network and host-based security platforms:

Vulnerability scanning systems and tools

Network-based Intrusion Detection/Prevention Systems (IDS/IPS)

Host-based Intrusion Detection/Prevention Systems (HIDS/HIPS)

File integrity verification and monitoring software

Security Information & Event Management (SIEM) platform

Application (Layer 7) & Network (Layer 3) Firewall

Network Access Control (NAC)

Data Loss Prevention (DLP)

Endpoint Encryption

Anti-virus and anti-spyware console

Firewall and network access controls lists

Web and E-mail proxy and filtering systems

Physical access control systems

Attend the calls of the clients related to technical difficulties by visiting the client place and providing remote support.

Sound understanding of compliance frameworks such as PCI, HIPAA, SOX, GLBA, FISMA, ISO 27001, COBIT, NIST etc.

ICS Cyber security Vulnerability & Gap Assessment report with scorecard and peer comparison

• Zone & Conduit Diagram

• ICS CRA Procedure

• ICS CRA report

Phase 1: Cyber security Vulnerability Assessment

Performed a Cyber security Vulnerability Assessment of the existing Power House and Chilled Water control systems, associated IT infrastructure (e.g. networks, servers, etc.) and site policies and practices in order to identify the gaps between the current system what is required by industry standards such as ISA 62443 (formerly ISA99) and NERC CIP. Provided 4 days of onsite information gathering. Assess the network design as well as the existing configurations of control devices, servers/workstations, and network switches, routers and firewalls. Reviewed existing policies and procedures and interviewed key staff. Provide a report of the gaps and vulnerabilities of the evaluated system and facilitated a discussion of the results.

Phase 2: Risk Assessment Workshop

Facilitated a Cyber security Risk Assessment based upon the vulnerabilities discovered in the Vulnerability Assessment in order to quantify business risk, cost, and project value. The risk assessment was performed using a methodology that estimates risk as function of threat likelihood, vulnerability and consequence. The risk assessment methodology allowed the client to estimate the risk reduction that could be achieved by implementing select security countermeasures. Key personnel from operations, engineering, health & safety and IT participated in the multi-day workshop. Provided a report detailing the risks and providing prioritized recommended mitigations. The report included a proposed Zone & Conduit model, which is a diagram illustrating the recommended network security zones for the upgraded system.

Conduct a high-level assessment of corporate control system cyber security preparedness

Performed detailed vulnerability assessments of several gas plants and a remote operation centers

Performed detailed vulnerability assessment on company’s gas pipeline operations center and various pipeline facilities

Facilitated formal cyber security risk assessments

Presented findings and recommendations to senior management

Prepared detailed written reports

Facilitated control system cyber security policy development workshops

Assessed the cyber security of the Eastern portion of the company’s pipeline operations

Reviewed network diagrams

Reviewed policies and procedures

Reported on findings and offer recommendations to close gaps

Developed a 54 page best practices manual for securing SCADA IT networks from cyber security threats

Performed a control system security assessment of City’s water and wastewater treatment facility SCADA systems

Onsite security data collection

Analysis of information

Presentation of key observations and recommendations to management

Formal report

Reviewed the network topology and proposed firewall configuration to provide remote access to the existing SCADA system. Provided recommendations for improvements to the network and firewall settings.

Provided recommendations for network topology, settings and considerations for a new SCADA system that involves active directory that is centrally managed for remote access alarm callouts that will be in compliance to NERC CIP version

The study was performed following the new international standard IEC 62443-2-1 (a.k.a. ANSI/ISA 99.02.01) Security for Industrial Automation and Control Systems: Establishing an Industrial Automation and Control Systems Security Program

Provided client with a comprehensive report (84 pages) addressing 27 key elements of a security program and documenting, for each element, industry best practices, observed gaps, and recommendations to address the gaps.

Applied zone & conduit modeling to the overall network and provided the client with a cost effective network segmentation strategy that complies with industry best practices for defense-in-depth network protection.

Conducted Cyber Vulnerability Risk Assessment (CVA) of the electric utility SCADA system and made computer network security recommendations regarding compliance of NERC CIP-002 through CIP-009 and other regulations and standards

Conducted workshop with District staff to present and collaborate on the following

Cyber Vulnerability Assessment (CVA) and compliance of NERC CIP-005 & CIP-007.

Overview of NERC's CIP standards 2 through 9 compliance

Applying standards such as ISA 99 and NERC CIP-002…009

Best practices in security policy, security education programs, layering of firewall defenses and the hardening of endpoint devices through patch management, antivirus deployment, and micro-firewalls within the control network, resulting in compliance

Company

Job Title/ Description

Working Peroid

MYTRA

Design Engineer/Instrumentation & Automation Analytical Electrical Engineer

Jan 13- Oct 15