Architecture domains
Where I spend my design time – each backed by fifteen years of building and running production networks.
Data center architecture
Cisco ACI Multi-Pod and VXLAN EVPN fabrics designed for scale, multi-tenancy and failure – with NSX-T, HPE and firewall integration worked out before the first cable is patched.
- Cisco ACI Multi-Pod
- VXLAN EVPN
- Nexus 9000
- VMware NSX-T
- HLD / LLD
Hybrid & multi-cloud
Routed, policy-consistent connectivity between data centers and AWS, Azure and GCP – Direct Connect, VPN, transit routing and load balancing, built as code.
- AWS Transit Gateway
- Direct Connect
- Azure networking
- BGP design
- Terraform
Security & segmentation
Zero-trust segmentation by design: tenants, VRFs and contracts in the fabric, micro-segmentation with NSX-T, and firewalls and VPNs at every trust boundary.
- Zero-trust segmentation
- FortiGate
- Cisco ASA / Firepower
- Juniper SRX
- IPsec VPN
- Cisco ISE
Enterprise WAN & campus
Multi-country WAN, MPLS and SD-WAN, and identity-based campus access with SD-Access and ISE – designed so branches keep working when links fail.
- MPLS L3VPN
- SD-WAN
- SD-Access & ISE
- OSPF / BGP
- IPv4 / IPv6 design
Technical skills
Platforms and technologies I have designed with, deployed or operated in production.
Routing & switching
- BGP
- MP-BGP
- OSPF
- EIGRP
- MPLS L3VPN
- VRF
- EVPN
- DMVPN
- HSRP / VRRP / GLBP
- Multicast
Data center
- Cisco ACI (Multi-Pod)
- Nexus 9K/7K/5K/2K
- VXLAN
- vPC
- VMware NSX-T
- HPE & Arista integration
Cloud networking
- AWS VPC & Transit Gateway
- AWS Direct Connect
- Site-to-Site VPN
- AWS ALB / NLB
- Azure networking
- GCP
- OCI
Security
- Fortinet FortiGate
- Cisco ASA & Firepower
- Juniper SRX
- Check Point
- Cisco ISE
- IKEv2 / IPsec
- SSL VPN
Load balancing
- F5 LTM / GTM
- Citrix NetScaler
- VMware Avi
- AWS ALB / NLB
Automation & IaC
- Ansible
- Terraform
- Python
- Bash
- YAML / JSON templates
- Git
- Jenkins CI/CD
Campus & SD-WAN
- Cisco DNA Center
- SD-Access
- Wireless LAN controllers
- Silver Peak
- Cisco vManage
Monitoring
- Cisco ThousandEyes
- SolarWinds
- PRTG
- Stealthwatch
- Cacti
- Prime Infrastructure
Process & leadership
- ITIL change & incident
- ServiceNow / Remedy
- MOPs & rollback plans
- Design reviews
- Mentoring engineers
Certifications
Official badges – select one to verify it on Credly.
CCIE Enterprise Infrastructure#57252 · Cisco Certified Internetwork ExpertCisco’s expert-level certification – earned as CCIE Routing & Switching
CCNP Data CenterCisco Certified Network ProfessionalVerify ↗
Data Center DesignCisco Certified SpecialistVerify ↗
Data Center CoreCisco Certified SpecialistVerify ↗
Data Center OperationsCisco Certified SpecialistVerify ↗
Enterprise CoreCisco Certified SpecialistVerify ↗
Secure Solutions with VPNsCisco SVPNVerify ↗
CCNACisco Certified Network AssociateVerify ↗Also certified: Microsoft Azure AZ-700 (Azure Network Engineer) · VMware VCP-NV 2022 (NSX-T) · Juniper JNCIA-Junos · CCIE Data Center written exam · All badges on Credly ↗
Open to Network Architect roles
Looking for a network architect?
I turn business requirements into data center, hybrid cloud and enterprise network designs that are secure, documented and proven in production. Recruiters and hiring managers are welcome to reach out.