I am a cybersecurity engineer and cryptography researcher working across network security, Zero Trust, applied cryptography, and post-quantum cryptography.

My work combines academic research in cryptography with operational experience in SOC environments, secure network architecture, and cybersecurity engineering. I focus on translating security concepts and cryptographic research into practical architectures, reproducible laboratories, and clearly documented technical implementations.

With a background spanning applied mathematics, cryptographic research, cybersecurity operations, and secure network engineering, I approach digital trust as both a scientific and an engineering challenge. My interests include hybrid cryptographic systems, quantum-safe migration, identity-aware access, secure communications, and the protection of long-lived digital infrastructures.

This GitHub portfolio documents my work toward helping organizations address today’s cyber threats while preparing for tomorrow’s quantum-security challenges.

My expertise spans operational cybersecurity, security architecture, and cryptographic research, with a particular focus on building resilient systems for both current and emerging threats.

• Network Security & Secure Infrastructure
  Secure network architecture, FortiGate technologies, network access control, IPsec and SSL VPNs, IDS/IPS, traffic analysis, and infrastructure hardening.

• Zero Trust & Identity-Aware Access
  ZTNA architecture, continuous verification, device validation, policy-based authorization, least-privilege access, and quantum-safe Zero Trust prototypes.

• Applied & Post-Quantum Cryptography
  Cryptographic protocol design, authenticated encryption, key derivation, message authentication, hybrid classical/PQC schemes, ML-KEM, and ML-DSA experimentation.

• PKI, Certificates & Digital Trust
  Classical and hybrid PKI laboratories, X.509 certificates, digital signatures, certificate validation, revocation mechanisms, and cryptographic migration strategies.

• Security Operations & Threat Analysis
  SOC monitoring, security-alert analysis, incident investigation, operational procedures, phishing-awareness campaigns, and defensive security practices.

• Secure Communications & IoT Security
  Secure client-server channels, IoT communication protocols, key lifecycle management, replay protection, and encryption of voice, images, and multimedia.

• Cryptographic Research & Applied Mathematics
  Chaotic dynamical systems, pseudorandom generation, privacy-utility modelling, multimedia encryption, statistical security testing, and reproducible research implementations.

Terminology note: ML-KEM and ML-DSA are the current NIST standards derived from CRYSTALS-Kyber and CRYSTALS-Dilithium. The earlier names are retained only when referring to legacy specifications, implementations, or library interfaces.

Status: Stable educational and experimental laboratory — not production-ready
Technologies: Python, FastAPI, Docker, X.509, RSA, ECDSA, Ed25519, ML-KEM, ML-DSA, liboqs

A laboratory for building, testing, and comparing classical, post-quantum, and hybrid PKI architectures. It includes certificate lifecycle operations, hybrid validation policies, downgrade-attack demonstrations, benchmarks, API endpoints, automated tests, and dedicated Docker modes for real PQC experiments.

Status: Security architecture prototype
Technologies: Python, liboqs, PQC KEM, AES-GCM, HKDF, Docker, policy-based access control

A Zero Trust Network Access prototype combining identity verification, device validation, policy enforcement, and post-quantum key establishment. The project explores how quantum-safe mechanisms can be introduced into identity-aware access architectures while preserving least-privilege and continuous-verification principles.

Status: Experimental reference implementation
Technologies: Python, X25519, Kyber512, HKDF, AES-GCM, Docker

A containerized client-server secure channel combining classical X25519 key agreement with a Kyber-based post-quantum KEM. Both shared secrets are combined through HKDF and used with AES-GCM, illustrating a hybrid migration approach for protecting application data during the transition to standardized PQC.

Status: Work in progress — design and reference implementation
Technologies: Python, PQC KEM, HKDF, AES-GCM, TCP

A secure-channel design for communication between a simulated IoT device and a server. The project addresses long-lived-device risks, authenticated encryption, nonce management, replay protection, and the “store now, decrypt later” threat model.

• Image Encryption Scheme Based on New Model of Gingerbreadman Map — Advances in Intelligent Systems and Digital Applications, 2025. First author. DOI: 10.1007/978-3-031-95326-2_39
• Modelling the Relationship between Privacy and Loss of Data Utility When Analysing the Data — Journal of Theoretical and Applied Information Technology, 2022. First author. Publication
• A Pseudo-Random Number Generator Using Double Pendulum — Applied Mathematics & Information Sciences, 2020. First author. DOI: 10.18576/amis/140604
• A Pseudo Random Bit Generator Based on a Modified Chaotic Map — International Journal of Network Security, 2019. First author. DOI: 10.6633/IJNS.201905.21(3).06

• Towards a Post-Quantum Cryptography for the Internet of Things — 1st International Conference on Mathematics and Applications (ICMA 2025), Casablanca. First author.
• Image Encryption Scheme Based on New Model of Gingerbreadman Map — International Conference on Intelligent Systems and Digital Applications (ISDA 2025), FST Settat. Speaker and first author.
• A New Method for Voice Encryption Based on Chaotic System — MOCASIM 2018, Marrakech. Speaker and first author.

I treat cryptographic research as the starting point of an engineering process, not as evidence of production readiness by itself. My objective is to make security concepts understandable, testable, and reproducible before considering operational deployment.

Projects in this portfolio are developed around the following principles:

• Explicit scope and maturity — distinguishing research work, educational laboratories, prototypes, reference implementations, and production systems.
• Threat-driven design — documenting security goals, attacker capabilities, trust assumptions, and out-of-scope risks.
• Reproducible environments — providing structured code, dependency specifications, Docker workflows, tests, and practical execution guidance.
• Measurable validation — using functional tests, negative tests, benchmarks, statistical evaluation, and clearly stated limitations.
• Migration and interoperability — examining how post-quantum mechanisms can coexist with established cryptographic and network-security architectures.
• Operational awareness — considering identity, access control, key lifecycle management, logging, incident response, performance, and maintainability.

This approach connects my academic background in cryptography and applied mathematics with practical experience in network security, SOC operations, and secure infrastructure. It also ensures that experimental results are presented responsibly, without overstating their security guarantees or deployment maturity.

I am open to selected professional, research, consulting, and speaking opportunities aligned with:

• Cybersecurity and secure network architecture
• Zero Trust and identity-aware access
• Applied cryptography and cryptographic engineering
• Post-quantum migration and hybrid cryptographic systems
• PKI, digital certificates, and digital-trust infrastructure
• IoT security and secure communications
• Joint research, technical publications, and educational initiatives

Based in Rabat, Morocco, I welcome remote and international collaboration where technical accuracy, responsible security engineering, and long-term value are priorities.

For professional enquiries or research collaboration, connect with me on LinkedIn.