Actual Project EvidenceFlagship case study
Clinic Display System
A controlled in-house digital-signage platform that moves clinic display operations from fragmented manual updates to centralized, role-aware and observable delivery.
Selected technology portfolio
Explore 21 documented project records spanning healthcare IT, infrastructure resilience, cybersecurity, automation and multi-site operations. Start with the flagship case studies for context, delivery approach and evidence, then explore the wider project catalogue.
Flagship work
Selected work that best represents leadership scope, technical depth and practical operational value.
Actual Project EvidenceFlagship case study
A controlled in-house digital-signage platform that moves clinic display operations from fragmented manual updates to centralized, role-aware and observable delivery.
More flagship work
High-value projects spanning digital platforms, resilience, communications, automation and transformation.
Sanitized ScreenshotInternal healthcare operations, CRM and digital-services platform designed around real operational workflows.
A unified internal platform architecture that centralizes workflows, improves operational visibility and reduces dependence on disconnected tools.
Connectivity resilience design using primary and backup links to improve availability of clinical and operational services.
A hybrid WAN resilience design using FortiGate SD-WAN, DIA and 5G failover to improve service continuity.
Automated backup and validation workflows supporting MILLENSYS patient-file operations and NAS offload.
A scheduled PowerShell-based backup workflow with validation, logging, NAS offload and operational reporting.
Grandstream-based communications and call-center architecture spanning local and offshore operations.
A Grandstream UCM/Wave architecture with queues, IVR, recording, remote agents and a path toward Connect analytics integration.
Conceptual IllustrationMigration from Al-Aseel to ABC ERP across pharmacy operations with rollout and user enablement.
ABC ERP was rolled out across pharmacy operations with user enablement and operational transition support.
Extended flagship evidence
Explore healthcare integration, accreditation readiness, IT governance and multi-site operations through detailed case studies and clearly labeled visuals.
Architecture Representation
Architecture Representation
Architecture RepresentationSolutions in practice
Portfolio records are organized around practical delivery areas—not an undifferentiated list of tools.
Connectivity, backup and operating safeguards for dependable services.
Internal platforms and connected technology shaped around live workflows.
Unified communications and call-center operating design.
Standards, visibility and delivery across multi-entity operations.
Selected project catalogue
10 additional projects remain available for deeper review by technology domain or organization.
No projects match these filters.
Architecture RepresentationHealthcare-systems integration and readiness work spanning MILLENSYS HIS/ERP, Waseel, NPHIES onboarding, PACS/laboratory assessment and connected medical-device dependencies.
A clearer integration-readiness model with documented dependencies, support ownership and staged assessment/onboarding across existing and planned healthcare integrations.
Architecture RepresentationGroup-wide operating model for technology governance, centralization, standards, ownership, documentation and service-management maturity.
Structured segmentation plan separating infrastructure, service devices, cameras, access control and user endpoints.
Operational endpoint-security uplift using centralized EDR and policy-driven controls.
Led technology operations across pharmacies, headquarters and warehouses with standardized networking, security and support.
Architecture RepresentationSystems and network-security operations across a large multi-site pharmacy environment.
Repeated branch-opening support covering networking, systems, endpoints, ERP readiness and operational handover.
Group modernization work covering email authentication, domain security and collaboration-platform readiness.
Operational improvement initiative for server-room cooling resilience, environmental stability and infrastructure isolation.
Centralization planning for access-control operations, network placement, management and support standards.
Earlier and supporting delivery records remain available for deeper review without competing with the flagship and selected portfolio above.
IT-readiness contribution spanning availability, access controls, documentation, operational continuity and technology support.
Technology readiness contribution supporting the organization achieving a 99.86% CBAHI result, with team and organizational attribution preserved.
Structured hospital technology infrastructure assessment with a practical development roadmap for readiness, risks and improvement priorities.
Device discovery and inventory work supporting endpoint visibility, classification and lifecycle planning.
Commercial infrastructure and operational technology support across a multi-floor business environment.
Workstation, printer, user and branch technology support across 27 pharmacies, headquarters and warehouse operations.
Technical project families
Six technical families connect existing work to a consistent editorial evidence model. Only already-published project records are linked. Related work awaiting review stays descriptive, not a claimed new case study.
High-level service boundaries, resilience and branch support
Engineering challenge Multi-location services must remain usable without treating every reachable route as an approved business service.
Approach Organize secure transport, segmented service access, responsible owners and resilience as separate design decisions. Compare the dependencies of clinical traffic, branch services and enterprise support before drawing a generalized architecture.
Validation boundaries Request dated, sanitized transport and service-level checks. Never equate VPN status with successful application or external integration acceptance.
Transferable lessonsDo not publish: Exclude live addressing, VPN identities, firewall policy and device exports
Infrastructure ownership, virtualization, cooling and physical resilience
Engineering challenge Virtualized workloads and physical facilities create shared failure domains across compute, cooling, power and storage.
Approach Separate hypervisor and guest ownership, hardware lifecycle, rack documentation, environmental controls and recovery priorities. Present only generalized relationships rather than identifiable rack maps.
Validation boundaries Request owner-reviewed maintenance context, synthetic alarm examples and dated proof for any quantified resilience improvement.
Transferable lessonsDo not publish: Exclude hostnames, rack access details, equipment serials and recovery entrypoints
Protection layers, monitoring, governance and access boundaries
Engineering challenge Distributed devices and services require consistent endpoint controls without exposing security-policy internals.
Approach Explain layered controls across endpoint protection, network inspection, monitoring, asset ownership and least-privilege reviews. Focus on defensible governance rather than sensitive rule exports.
Validation boundaries Require anonymized control coverage context, owner-approved observations and clear scope boundaries; never infer security effectiveness solely from product installation.
Transferable lessonsDo not publish: Exclude credentials, active EDR policies, alert details and bypass configurations
Operational verification, capacity planning and recovery readiness
Engineering challenge A backup job may report success while recovery is still uncertain or storage capacity creates operational risk.
Approach Describe a lifecycle from scheduling and collection to validation, offload, alerting, retention and isolated restore tests. Use hypothetical file sets and abstract storage systems.
Validation boundaries Verify completion logs, destination evidence and restore-testing records separately. No patient files, database details, repository paths or unverified recovery times.
Transferable lessonsDo not publish: Exclude patient data, DB names, paths, account identities and repository details
Service ownership and separation of network, vendor and workflow acceptance
Engineering challenge Healthcare integrations cross application, vendor and network ownership boundaries and require privacy-aware validation.
Approach Map service owners and abstract integration contracts. Distinguish currently supported workflows, readiness tasks and future dependency assessments.
Validation boundaries Demand separate approval for transport, authorized access, application results, external partner acceptance and clinical workflow outcomes.
Transferable lessonsDo not publish: Exclude patient identities, real integration endpoints, tokens, access-control exports and confidential vendor data
Platform architecture, access governance, test coverage and UX
Engineering challenge Healthcare operations need maintainable internal applications and governed role-aware workflows while development proceeds safely.
Approach Explain modular ownership, synthetic QA, role boundaries, incremental delivery and controlled change reviews for Connect and Clinic Display families.
Validation boundaries Require per-version build/test artifacts, screenshot provenance, permission testing and confirmed production versus development status.
Transferable lessonsDo not publish: Exclude production credentials, identities, private URLs and internal access paths
Evidence standards
Media evidence architecture
This is a review register and conceptual visual guide, not a gallery of newly approved photographs. Visuals must pass provenance, redaction and security review before promotion.
Real project image with provenance, owner permission and security review
Edited or synthetic UI with redactions checked beyond visible pixels
High-level abstract blocks; never literal production topology
Educational artwork, explicitly not evidence of a deployed system
High-level service boundaries, resilience and branch support
Disclosure boundary: Exclude live addressing, VPN identities, firewall policy and device exports
Review status: Pending. No new production media approved by this section.
Infrastructure ownership, virtualization, cooling and physical resilience
Disclosure boundary: Exclude hostnames, rack access details, equipment serials and recovery entrypoints
Review status: Pending. No new production media approved by this section.
Protection layers, monitoring, governance and access boundaries
Disclosure boundary: Exclude credentials, active EDR policies, alert details and bypass configurations
Review status: Pending. No new production media approved by this section.
Operational verification, capacity planning and recovery readiness
Disclosure boundary: Exclude patient data, DB names, paths, account identities and repository details
Review status: Pending. No new production media approved by this section.
Service ownership and separation of network, vendor and workflow acceptance
Disclosure boundary: Exclude patient identities, real integration endpoints, tokens, access-control exports and confidential vendor data
Review status: Pending. No new production media approved by this section.
Platform architecture, access governance, test coverage and UX
Disclosure boundary: Exclude production credentials, identities, private URLs and internal access paths
Review status: Pending. No new production media approved by this section.
All diagrams above are newly authored, abstract UI illustrations. They do not show original screenshots or actual production architecture. Existing project evidence retains its prior classification and approvals.
Engineering knowledge index
Published case studies, existing project records and clearly marked candidates from ongoing work and career history. A candidate is not a claim of completed delivery.
82 records in the index
Healthcare-systems integration and readiness work spanning MILLENSYS HIS/ERP, Waseel, NPHIES onboarding, PACS/laboratory assessment and connected medical-device dependencies.
Existing inventory recordIT-readiness contribution spanning availability, access controls, documentation, operational continuity and technology support.
Existing inventory recordIT-side support for connected medical and imaging equipment, network access and workflow dependencies.
Existing inventory recordAssessment of imaging and laboratory system requirements around existing HIS, integration and operational dependencies.
Existing inventory recordDocumentation and review of the current integration context between MILLENSYS and Waseel.
Existing inventory recordTechnology readiness and coordination activities supporting NPHIES onboarding and future operational integration.
Existing inventory recordDependency mapping, controlled endpoint migration and application readiness verification.
Extension of NPHIES onboarding recordRecord type: needs evidence · Related family: nphies-onboarding-readinessConnectivity resilience design using primary and backup links to improve availability of clinical and operational services.
Existing inventory recordStructured segmentation plan separating infrastructure, service devices, cameras, access control and user endpoints.
Existing inventory recordSecure multi-site connectivity with independently verified network, voice and integration workstreams; no claim of full application acceptance.
Golden case study; combines existing WAN, NPHIES and communications recordsRecord type: flagship draft · Related family: healthcare-wan-resilienceIsolated fallback options and verification principles; not an active production backup path.
Future chapter of Jeddah–Muhayil golden case studyRecord type: proposal · Related family: jeddah-muhayil-secure-interconnectGrandstream-based communications and call-center architecture spanning local and offshore operations.
Existing inventory recordRollout and operational configuration of Wave for call-center and remote-agent use.
Existing inventory recordPBX modernization and migration planning for the Muhayil Asir medical center environment.
Existing inventory recordIntegration work connecting offshore Cairo call-center operations with Jeddah communications and workflow requirements.
Existing inventory recordCDR interpretation and reporting that preserves agent assignment changes over time.
Extension of unified communications and EMG CRMRecord type: engineering chapter · Related family: unified-communications-call-centerBilingual voice automation, escalation and safety design; not a live service.
Forward-looking concept attached to EMG CRMRecord type: proposalStructured hospital technology infrastructure assessment with a practical development roadmap for readiness, risks and improvement priorities.
Existing inventory recordOperational technology support spanning digital services, connectivity, email, security and branch technology requirements.
Existing inventory recordHosting, DNS, SSL and availability improvements supporting campaign traffic, lead capture and online booking continuity.
Existing inventory recordOperational improvement initiative for server-room cooling resilience, environmental stability and infrastructure isolation.
Existing inventory recordPower-protection review and remediation planning for critical healthcare IT infrastructure.
Existing inventory recordStructured rack inventory, cable identification and documentation work to improve maintainability and troubleshooting.
Existing inventory recordHosting-capacity upgrade planning to support campaign traffic, lead capture and booking availability.
Existing inventory recordOperational hardening of domain, DNS, SSL and cPanel practices across web properties.
Existing inventory recordOperational support for attendance devices, BioTime connectivity and infrastructure dependencies.
Existing inventory recordSanitized incident timeline and recovery decisions, subject to evidence review.
Potential case study supporting infrastructure operationsRecord type: needs evidenceAutomated backup and validation workflows supporting MILLENSYS patient-file operations and NAS offload.
Existing inventory recordRestore-focused validation of backup operations with recovery objectives and practical runbook considerations.
Existing inventory recordData-protection strategy covering retention, offsite copies, resilience and future immutable-backup controls.
Existing inventory recordAnalysis of medical-file backup exceptions and workflow gaps to improve completeness and operational assurance.
Existing inventory recordDocumented operational runbook for backup execution, validation, recovery checks and support ownership.
Existing inventory recordOperator-focused UI, backup verification evidence, and isolated restore journeys.
Extension of Healthcare Backup AutomationRecord type: engineering chapter · Related family: healthcare-backup-automationMonitoring space pressure, scheduling and verification without exposing patient data or production configurations.
Incident case study of backup automationRecord type: engineering chapter · Related family: healthcare-backup-automationInternal healthcare operations, CRM and digital-services platform designed around real operational workflows.
Existing inventory recordIn-house real-time clinic display platform for centralized operational content management.
Existing inventory recordOperational expansion and standardization of the in-house clinic display platform across additional screens and workflows.
Existing inventory recordPlanning for an internal IT module covering requests, assets, documentation and operational workflows.
Existing inventory recordServer build and infrastructure enablement supporting an internal AI-related workload and operational deployment.
Existing inventory recordModernization planning for public service forms including appointments, reports, leave requests and lab/radiology workflows.
Existing inventory recordCross-location troubleshooting of NVR remote viewing, account access and Hik-Connect enrollment constraints.
Existing inventory recordFacility isolation, group-level access, identity reconciliation and audit workflows in isolated development.
Engineering chapter of EMG CRMRecord type: engineering chapter · Related family: experts-care-connectModular monolith, domain ownership, compatibility gates and isolated modernization.
Engineering chapter of Experts Care ConnectRecord type: engineering chapter · Related family: experts-care-connectGroup modernization work covering email authentication, domain security and collaboration-platform readiness.
Existing inventory recordOperational endpoint-security uplift using centralized EDR and policy-driven controls.
Existing inventory recordOperational support for IP CCTV, NVR, access control and attendance technology across healthcare facilities.
Existing inventory recordPolicies and operating models for company-owned digital assets, access governance, lifecycle controls and accountability.
Existing inventory recordCentralization planning for access-control operations, network placement, management and support standards.
Existing inventory recordFirewall reporting and visibility work supporting traffic analysis, troubleshooting and policy review.
Existing inventory recordDedicated network segmentation planning for Hikvision access-control infrastructure.
Existing inventory recordLeast-privilege access and traceable reporting design; no recordings or identities disclosed.
Related to call center and policy controlsRecord type: engineering chapter · Related family: unified-communications-call-centerControlled downloads, consent boundaries and documented access controls.
Security chapter of Experts Care ConnectRecord type: engineering chapter · Related family: experts-care-connectMigration from Al-Aseel to ABC ERP across pharmacy operations with rollout and user enablement.
Existing inventory recordLed technology operations across pharmacies, headquarters and warehouses with standardized networking, security and support.
Existing inventory recordSystems and network-security operations across a large multi-site pharmacy environment.
Existing inventory recordRepeated branch-opening support covering networking, systems, endpoints, ERP readiness and operational handover.
Existing inventory recordCommercial infrastructure and operational technology support across a multi-floor business environment.
Existing inventory recordBuilt the core IT operating environment and server-room foundation supporting pharmacy growth and multi-site operations.
Existing inventory recordFortiGate deployment and branch connectivity standardization across pharmacy operations.
Existing inventory recordCentralized endpoint-protection deployment and operational management across the pharmacy environment.
Existing inventory recordWebsite, domain, DNS and SSL operations supporting a reliable and maintainable Balsam AlUla online presence.
Existing inventory recordOperational mapping and route-planning support for distributed pharmacy activity across multiple locations.
Existing inventory recordFortiGate operations and secure branch connectivity across a large distributed pharmacy environment.
Existing inventory recordVirtualization and Windows infrastructure support using Hyper-V for pharmacy business systems.
Existing inventory recordERP and SQL operational support including backup/restore activities and branch-system continuity.
Existing inventory recordData-loss prevention and endpoint-control operations supporting a large pharmacy environment.
Existing inventory recordWorkstation, printer, user and branch technology support across 27 pharmacies, headquarters and warehouse operations.
Existing inventory record15 pharmacies, headquarters and five warehouses: coordinated infrastructure, support and ERP transitions.
Expanded historical record; Balsam buildout and ERP migrationRecord type: historical expansion · Related family: balsam-infrastructure-buildoutLarge pharmacy network operations across over 150 branches, including systems, network security and enterprise support.
Expanded historical Zahrat project familyRecord type: historical expansion · Related family: zahrat-multisite-infrastructureOperational technical support across pharmacies, head office and warehouse.
Expansion of existing Alanaya branch supportRecord type: historical expansion · Related family: alanaya-branch-technology-supportHistoric commercial systems, endpoint and network support across a multi-location environment.
Expansion of existing Al Mazloum commercial infrastructureRecord type: historical expansion · Related family: almazloum-multisite-infrastructureGroup-wide operating model for technology governance, centralization, standards, ownership, documentation and service-management maturity.
Existing inventory recordPlanning and readiness work for modern collaboration, mailbox migration and centralized account governance.
Existing inventory recordCentralized inventory model for group technology assets, ownership, lifecycle and support visibility.
Existing inventory recordIdentity roadmap for moving from fragmented workgroup practices toward centralized directory, policy and access management.
Existing inventory recordMonitoring architecture work to improve visibility across networks, servers, endpoints and operational services.
Existing inventory recordDomain, corporate account and recovery ownership principles.
Extends email security and digital asset governanceRecord type: engineering chapter · Related family: it-governance-digital-assetsStatic site architecture, accessible UX, responsive QA, indexing foundations and evidence-driven iteration.
New personal engineering case studyRecord type: needs evidenceStandardized Windows deployment, backup and workstation-readiness processes for healthcare users.
Existing inventory recordDevice discovery and inventory work supporting endpoint visibility, classification and lifecycle planning.
Existing inventory recordShared service ownership and entity-level accountability across a multi-company environment.
Extension of Group IT Governance programRecord type: engineering chapter · Related family: group-it-governance-centralizationProject-specific agents, isolated workspaces and approval-led changes.
Proposed engineering workflow, not a completed platformRecord type: proposalPublication boundary: internal production topology, live IP addresses, credentials, patient records and PBX identifiers are not included. New candidate records remain drafts pending editorial and security review.
Career context
Explore the career environments and responsibilities behind the selected project portfolio.