01 · Security
Written, enforced, tested.
Policy on ISO 27000 and the Saudi NCA ECC, then risk assessments, audits and drills that prove it holds. Certified Ethical Hacker.
Saudi Arabia · Taking on select engagements
Abdullah Abbas
When infrastructure, security and operations have to work, organizations bring me in.
I take charge of the systems an organization cannot afford to lose: I secure them, run them, and build what they are missing. Government bodies and companies have trusted me with exactly that for more than ten years. More than five platforms running today are the proof.
$ whoami infrastructure · security · products $ uptime 10+ years running production systems $ ls ~/built aloke outoms madar hwe-aio waia $ cat ~/certs | wc -l 10 $
- Years in IT
- 10+
- Platforms in production
- 5+
- Certifications
- 10
- Organizations that trusted me
- 9+
Trusted with their infrastructure, security and operations
- Jazan Chamber
- Ministry of Environment, Water and Agriculture
- Farasan Municipality
- Al Hokair
- JAZI Dental Clinics
- Culture House
- JOND
- Jaz International
- FFS Co-op
- and many more
The difference
Systems fail in the gaps between teams. I close them.
Security, infrastructure and software usually sit with three teams and three agendas. I hold all three to one standard, so the decision, the build and the result stay with one owner.
02 · Infrastructure
Secure from the first cable.
Data centers, virtualization, networks and cloud, designed to run without drama. Cisco CCNP and Microsoft MCSE.
03 · Software and operations
Built, shipped, running.
More than five platforms in production today, and operations measured by KPIs instead of opinions.
The same pattern, wherever I have worked.
- Fragile servers became managed ones. Bare metal moved to a virtualized, monitored and backed up environment at Jazan Chamber.
- Security became written policy, not good intentions. Procedures on ISO 27000 and the NCA ECC, with the controls that enforce them.
- Operations became measurable. KPIs, dashboards, audits and drills that leadership reads in minutes, built at JOND.
- Paper became software. Where the right tool did not exist, I built it, shipped it, and I still run it.
Proof, not promises
More than five platforms, running in production today.
Anyone can describe what they would build. These are live, used every day by restaurants, security companies, cooperatives, businesses and the engineers who learn from my guides. I designed each product, built the systems behind it and run the infrastructure it lives on.
Restaurants, cafés and shops
Aloke
The operating system for a shop: loyalty, the till with an e-invoice for every sale, pre-orders, curbside pickup and the digital menu, all in one place.
aloke.hwe.sa- 5native apps for customers, owners and staff on iOS and Android
- 4systems in one subscription: loyalty, POS, pre-order, digital menu
- 3node Kubernetes cluster with replicated PostgreSQL and offsite backups
What I built
- Loyalty cards in Apple and Google Wallet
- POS with e-invoices
- Kitchen and pickup screens
- Realtime order updates
- Owner console and CRM
- k3s, Traefik, cert-manager
Security companies
Outoms
Runs a whole security company on one system, from the guard’s geofenced check-in to the daily report that reaches the client at 23:55, with portals for clients and project consultants.
outoms.com- 60+modules and sub-modules, switched on per company
- 3portals: the security company, its clients and project consultants
- 36automated jobs: cover for no-shows, escalations, daily reports
What I built
- Hub-and-spoke integration with signed events
- Self-hosted maps and routing
- Field apps that keep working offline
- AI HR advisor on a self-hosted model
- Isolated deployment per company
- Release pipeline and licensing
Cooperative societies
Madar
Brings the supervising authority, the societies and their members onto one platform: membership, online board elections, audits and digitally signed meeting minutes.
coop.hwe.sa- 6roles, from system administrator to society member
- 3notification channels: email, SMS and WhatsApp
- 1place for elections, audits and minutes
What I built
- Secure online voting with codes
- Audit requirements and evidence
- Hijri and Gregorian dates
- OTP sign-in
- Excel and PDF reporting
Any company or business
HWE AIO
A business suite under one sign-in and one subscription: accounting, inventory, CRM, point of sale, e-commerce, bookings, HR and payroll, projects, help desk and contracts.
hweaio.com- 20business apps on one platform
- 1shared core for identity, subscriptions and permissions
- 2languages, Arabic and English, right to left done properly
What I built
- Single sign-on
- Subscription and entitlement service
- API gateway and service registry
- E-invoicing pipeline (ZATCA Phase 2)
- GOSI in payroll
Engineers and IT teams
Learn with Abdullah
A platform I built on my own with one goal: short, step by step guides to everything I know, read one step at a time, in Arabic and English.
waia.to- 12free guides, from Proxmox and pfSense to Wazuh
- 7,000+views from engineers and system admins
- 2languages, every guide in Arabic and English
What I built
- Step by step reader with progress
- One click copy for every command
- Search and topic filters
- Accounts, creator pages and ratings
- Sharing to WhatsApp, LinkedIn, X and Telegram
- Dark mode
Track record
Trusted from the server room to the operations floor.
More than 10 years across government, enterprise and operations. Each role added a layer: infrastructure, then security, then architecture, then leadership.
Download the full CV-
2025 to present
Operations Assistant Manager
JOND
- Coordinate large-scale security operations with a focus on governance, compliance and performance monitoring.
- Built the KPIs and dashboards that made security operations measurable and accountable.
- Integrate quality assurance and risk management frameworks into daily operations.
- Run periodic security audits and drills to measure readiness and drive improvement.
- Automated operations by building a new application for them.
-
2024 to 2025
Director
FFS Co-op
- Led strategic planning, governance and compliance with government regulations.
- Directed operations and kept them aligned with the organization’s goals.
- Oversaw business continuity and IT strategic initiatives.
-
2023 to 2024
IT Architect
Jaz International Company
- Assessed and upgraded the IT infrastructure and designed the to-be architecture.
- Evaluated and optimized the Jaz Com app for technical performance.
- Designed and implemented infrastructure for multiple projects, and onboarded new IT staff.
-
2020 to 2023
IT Infrastructure and Information Security Specialist
Jazan Chamber
- Migrated systems from bare metal to virtualized environments.
- Ran cloud and on-premise systems across DEEM, DigitalOcean and Linode.
- Upgraded the data center, the VoIP system and the internal network (LAN, WLAN, VLANs).
- Wrote security policies and procedures based on ISO 27000 and the Saudi NCA ECC.
- Deployed firewalls, backup systems and an ISMS on the ELK Stack.
- Led risk assessments and security awareness sessions, and trained Jazan University IT students.
-
2018 to 2019
Project Coordinator and IT Technical Assistant
Nozom Alkhbrat IT Co.
- Supported and updated the information security system for the Ministry of Environment, Water and Agriculture (MEWA).
- Coordinated IT projects and kept systems compliant with security requirements.
Independent problem solver
When IT stops working, they call me.
Alongside my full-time roles, organizations bring me in on my own to solve the IT problems in front of them. I find the real cause and fix it properly.
- HealthcareJAZI Dental Clinics
- Private sectorAl Hokair
- GovernmentFarasan Municipality
- CultureCulture House
Networks that drop or crawl
Rebuilt on the full UniFi lineup, wired and wireless: gateways, switches and access points, planned for coverage and load.
Threats nobody can see
Security monitoring and threat detection with Wazuh, so incidents surface early instead of after the damage.
Systems that outgrew their setup
Servers, backups and access put back in order, secured, and handed over in a state the team can run.
Depth
The whole stack, from the cable to the policy.
Information security
Risk assessment, security auditing, and policies and procedures built on ISO 27000 and the Saudi NCA Essential Cybersecurity Controls.
Infrastructure
Virtualization, data centers, networks and cloud, designed to be secure first and then run without drama.
Governance and operations
KPIs, dashboards, audits and drills that turn operations into something leadership can measure and trust.
Products
Turning an operation that runs on paper into software people use every day, then running it in production.
- Information security
- Risk assessment · Security auditing · Policy and procedure implementation
- Virtualization
- VMware ESXi · Proxmox · XCP-ng
- Servers
- Active Directory · Exchange · MS SQL · MySQL
- Networking
- Firewalls · Routers · Switches · VLAN design · The full UniFi lineup, wired and wireless
- Systems and hosting
- Apache · Nginx · IIS · PHP development
- Cloud
- DEEM · DigitalOcean · Linode · Kubernetes (k3s)
- Programming
- C# · React Native · PHP
- Monitoring and detection
- Wazuh · ELK Stack · Server and network health checks
Credentials
Certified by Cisco, Microsoft and EC-Council.
Cisco
- CCNA
- CCNA Routing and Switching
- CCNA Security
- CCNP Routing and Switching
- CCNP Enterprise
- Specialist, Enterprise Core
- Specialist, Enterprise Infrastructure
Microsoft
- MCSE
- MCSA
EC-Council
- CEH, Certified Ethical Hacker
How I work
- Leadership
- Team management
- Strategic planning
- Negotiation
- Communication
- Collaboration
- Problem solving
- Fast learner
Languages
- Arabic, native
- English, professional
Giving back
I publish what I know, so others can build it too.
Free, step by step guides on Learn with Abdullah, the platform I built at waia.to, for engineers and admins building on the same open source stack I trust in production.
- Free guides
- 12
- Views
- 7,000+
-
Infrastructure
Proxmox Installation Guide
Proxmox VE on a bare metal server, step by step.
-
Information security
Wazuh SIEM Installation Guide
The Wazuh server setup and agent installation.
-
Firewall
pfSense CE 2.8.0 Installation Guide
pfSense on a dedicated server or appliance.
-
Storage
TrueNAS as a VM on Proxmox VE
TrueNAS CORE and SCALE with disk passthrough.
-
Network
Nginx Proxy Manager: Port Forwarding
Port forwarding for NPM, configured end to end.
-
Containers
Docker CE on Ubuntu Server 24.04 LTS
Docker Engine from prerequisites to first run.
How engagements begin
Every engagement starts with the problem, not a proposal.
I listen first and say plainly whether I am the right person for it. When I am, you see a clear plan with numbers before anyone commits.
- 1
A 30-minute call
You describe the problem. I tell you honestly whether I am the right person for it.
- 2
A short assessment
Your top risks, the quick wins, and a plan with clear numbers.
- 3
Results you can measure
KPIs agreed up front, so progress is visible from the first month.
Work with me
Bring me your hardest problem.
I take on a limited number of engagements alongside the platforms I run, so the organizations I work with get my full attention. Leadership roles and projects in IT, security and operations.