Technology breadth. Architectural depth.
Explore a domain.
Follow the work behind it.
Network architecture
Data center, campus and WAN architecture across vendors, with deliberate failure boundaries and programmable operations.
Enterprise networks, from fabric to API
Data center & fabrics
Nexus and application-centric ACI; multi-pod, multi-site, VMM integration, VXLAN/EVPN and NDFC. Fabric boundaries, segmentation and migration planning.
Campus, WAN & identity
Catalyst, SD-Access and SD-WAN. BGP, OSPF, traffic engineering, convergence and high availability; integration with ISE, NAC and firewalls.
APIs & network automation
APIC REST APIs, NETCONF and Python integrations. Terraform service provisioning, Ansible configuration, normalized assessment data and controlled, validated changes.
Cloud-managed networks with consistent policy
LAN & wireless
Switching and wireless architecture for distributed sites, with a shared management model.
WAN & resilience
MX connectivity, SD-WAN, redundant uplinks, failover paths and hybrid-cloud integration.
Operations & integration
Dashboard-based operations, API integration and repeatable configuration across sites.
Enterprise campus and wireless architecture
Wired access
Campus switching, segmentation, uplink design and resilient access to services.
Wireless & RF
Wireless design, coverage evaluation, RF spectrum analysis and coexistence planning.
Identity & operations
Access policy, NAC integration, operational visibility and documented implementation requirements.
Routing, switching and interoperable networks
Routing policy
BGP, OSPF, route control and traffic engineering across network boundaries.
Switching & resilience
Layer 2/Layer 3 design, redundant paths, convergence and failure-domain planning.
Integration & validation
Multivendor interoperability, migration scenarios and validation before production changes.
Networking and security for virtualized platforms
Virtual networks
Logical networking, overlay connectivity and integration with the physical underlay.
Segmentation
Workload isolation, security policy and firewall integration for east–west traffic.
Hybrid architecture
Connectivity between virtualized workloads, data center services and hybrid-cloud environments.
Networking within the data center architecture
Physical connectivity
Server, storage and network connectivity; interface requirements and resilient uplinks.
Data center integration
Switching and Layer 3 boundaries within a multivendor infrastructure.
Implementation detail
Port mappings, cabling, capacity, rack dependencies and technical documentation.
Campus connectivity and multivendor integration
Campus networks
Wired and wireless infrastructure shaped around access, coverage and service requirements.
Segmentation & continuity
Network separation, resilient paths and consistent access to business services.
Architecture & delivery
Interoperability, migration planning, implementation documentation and validation.
Security integrated into the network architecture
Security boundaries
Firewall integration, network segmentation and explicit communication policies.
WAN & hybrid access
Secure connectivity, SD-WAN architecture and connectivity across distributed environments.
Operational visibility
Firewall telemetry, event-correlation requirements and integration with the wider security stack.
Network emulation and scenario validation
Topology modeling
Build representative network scenarios before applying changes to live infrastructure.
Protocol behavior
Inspect routing, overlays, convergence and recovery after deliberate path interruptions.
Repeatable labs
Use emulated environments for architecture validation, troubleshooting and technical training.
Practical network experiments and training
Network scenarios
Model routers, switches and connected services in controlled lab topologies.
Troubleshooting
Trace traffic, inspect protocol behavior and compare alternative configuration approaches.
Knowledge transfer
Turn repeatable experiments into technical explanations and hands-on training.
Wireless & RF engineering
Coverage, capacity and mobility shaped around the RF environment, with infrastructure assessment and deep technical training.
Enterprise Wi-Fi and industrial mobility
Architecture & design
Coverage and capacity planning; RF spectrum, interference, channel and power design. Cisco URWB, mesh and Wi-Fi 7 coexistence.
Implementation & integration
Wireless infrastructure, roaming and industrial backhaul; integration with 802.1X, identity services and the wired network.
Validation & operations
Infrastructure assessment, mobility and coexistence validation; troubleshooting methodology and advanced technical instruction.
Cloud-managed wireless across distributed sites
Architecture & design
Wireless coverage, capacity and site requirements within a cloud-managed network architecture.
Implementation & integration
Wireless and switching integration; consistent access policies and operational configuration across locations.
Validation & operations
Evaluate client experience, RF behavior and roaming; use monitoring to guide troubleshooting and improvements.
Campus wireless, RF and access integration
Architecture & design
Wireless coverage and capacity, mobility requirements and coexistence with the surrounding radio environment.
Implementation & integration
Connect wireless access to campus networking, segmentation and identity services.
Validation & operations
Assess infrastructure, spectrum and client connectivity; explain design trade-offs through structured workshops.
Wireless architecture in multivendor environments
Architecture & design
Plan access, coverage and capacity around the devices, applications and physical environment.
Implementation & integration
Integrate wireless infrastructure with wired access, segmentation and security requirements.
Validation & operations
Evaluate RF conditions, roaming and interoperability; document the implementation and operating procedures.
RF analysis and wireless assessment
Architecture & design
Study coverage, capacity, interference and channel use to inform the wireless design.
Implementation & integration
Translate assessment findings into placement, channel, power and coexistence considerations.
Validation & operations
Evaluate spectrum and infrastructure behavior; teach assessment methods and interpretation of RF evidence.
Hybrid cloud & platforms
Public clouds, virtual machines and containers connected through explicit network, security and availability boundaries.
Azure within the hybrid architecture
Architecture & design
Plan cloud connectivity, routing boundaries and consumption of services alongside the data center.
Implementation & integration
Integrate Azure connectivity with enterprise WAN, security policy and multicloud interconnection.
Validation & operations
Evaluate paths, convergence and connectivity dependencies; document operation and recovery considerations.
AWS connected to enterprise services
Architecture & design
Design cloud access and service-consumption paths across on-premise and multicloud environments.
Implementation & integration
Integrate WAN and cloud connectivity with segmentation, security boundaries and routing policy.
Validation & operations
Validate path behavior, service reachability and infrastructure dependencies under change.
GCP and on-premise service integration
Architecture & design
Design hybrid connectivity, routing boundaries and workload access across the enterprise environment.
Implementation & integration
Connect cloud routing and interconnection to data center fabrics, firewalls and services.
Validation & operations
Validate connectivity and failover scenarios; document replication and application traffic considerations.
IBM Cloud and service orchestration
Architecture & design
Structure hybrid connectivity and service dependencies across compute, storage and networking.
Implementation & integration
Integrate network automation with IBM Cloud Orchestrator and multitenant service provisioning.
Validation & operations
Validate isolation, repeatability and end-to-end service creation across infrastructure layers.
Oracle Cloud in a multicloud environment
Architecture & design
Plan service connectivity and routing within an architecture spanning multiple cloud providers.
Implementation & integration
Integrate cloud access with enterprise WAN and carrier-neutral interconnection where required.
Validation & operations
Review convergence, traffic profiles and operational dependencies across provider boundaries.
Cloudflare as an access layer
Architecture & design
Define the relationship between Internet access, published services and the internal environment.
Implementation & integration
Integrate Cloudflare services with lab workloads and the surrounding network architecture.
Validation & operations
Observe service availability and access dependencies while keeping internal infrastructure details private.
Virtual infrastructure and physical fabric integration
Architecture & design
Design virtual networking, workload connectivity, availability and physical infrastructure dependencies.
Implementation & integration
Integrate virtual domains with Cisco ACI and connect virtualized services to storage and security.
Validation & operations
Validate migration paths, connectivity and failure boundaries; document operational requirements.
Hyperconverged platforms within the wider architecture
Architecture & design
Plan network, compute and storage relationships for virtualized workloads and hybrid environments.
Implementation & integration
Integrate platform connectivity with data center fabrics, security policy and enterprise services.
Validation & operations
Review capacity, availability and recovery dependencies; validate integration before handover.
Virtual machines and repeatable lab environments
Architecture & design
Plan VM placement, connectivity, storage and resource allocation for practical infrastructure experiments.
Implementation & integration
Run virtualized services and network-emulation environments; integrate bridges, storage and monitoring.
Validation & operations
Observe guest resource usage and availability; distinguish assigned capacity from measured consumption.
Microservices, service networking and isolation
Architecture & design
Design workload connectivity, microsegmentation, persistent storage and availability boundaries.
Implementation & integration
Automate provisioning with Terraform and integrate container networking with hybrid infrastructure.
Validation & operations
Validate service reachability, isolation and repeatable deployment; inspect workload and platform dependencies.
Application platforms integrated with enterprise infrastructure
Architecture & design
Plan container-platform connectivity, security boundaries and hybrid service dependencies.
Implementation & integration
Integrate OpenShift environments with automated provisioning and workload segmentation.
Validation & operations
Review network policy, service communication and implementation requirements with the delivery team.
Cloud infrastructure with explicit network boundaries
Architecture & design
Design relationships between virtual networking, compute, storage and enterprise connectivity.
Implementation & integration
Integrate cloud environments with data center fabrics, segmentation and hybrid services.
Validation & operations
Validate infrastructure dependencies and connectivity; document implementation and operational trade-offs.
Container services and Docker Swarm
Architecture & design
Plan service placement, overlay networking, persistence and availability across ARM cluster nodes.
Implementation & integration
Deploy and configure lab workloads; integrate storage, ingress and observability services.
Validation & operations
Inspect service health, replica placement and resource usage; assess recovery and single-instance dependencies.
IBM Power and LPAR integration
Architecture & design
Plan partitioned workloads, connectivity and infrastructure dependencies within hybrid architectures.
Implementation & integration
Integrate Power/LPAR environments with data center networking and automated provisioning workflows.
Validation & operations
Validate connectivity, isolation and physical implementation requirements across the solution.
Security & identity
Identity, segmentation and event correlation built into the network, with cryptography and trust dependencies made explicit.
Cisco ISE and identity-based network access
Architecture & design
Design NAC and 802.1X around identity, PKI, RADIUS, TACACS+ and directory dependencies.
Implementation & integration
Integrate ISE, network devices, certificate authorities and domain controllers with the delivery team.
Validation & operations
Validate authentication paths, authorization and administrative access; troubleshoot certificates and secure key exchange.
Network context for security operations
Architecture & design
Connect network topology, access context and operational visibility to security analysis.
Implementation & integration
Correlate Catalyst Center information with firewall data and Splunk events.
Validation & operations
Investigate infrastructure errors and events with network context; document interpretation and operating procedures.
Firewall policy within software-defined infrastructure
Architecture & design
Design trust boundaries, segmentation and permitted communication across application environments.
Implementation & integration
Integrate Palo Alto firewalls with SDN, data center fabrics and hybrid connectivity.
Validation & operations
Validate policy and traffic paths; identify telemetry and troubleshooting requirements.
Security enforcement across infrastructure boundaries
Architecture & design
Structure firewall placement, segmentation and communication policy around the architecture.
Implementation & integration
Integrate Check Point environments with network fabrics, enterprise connectivity and services.
Validation & operations
Review policy behavior, resilience and operational visibility during implementation and change.
Network and security integration
Architecture & design
Design firewall boundaries, segmentation, distributed connectivity and SD-WAN requirements.
Implementation & integration
Integrate Fortinet security with multivendor networks and enterprise services.
Validation & operations
Validate access paths and policy; connect relevant firewall telemetry to wider event analysis.
Security controls in my real lab
Architecture & design
Define controlled access and segmentation for a laboratory used to validate architecture concepts.
Implementation & integration
Integrate the pfSense appliance with Internet connectivity and internal services.
Validation & operations
Observe availability and network behavior while withholding private security configuration from the public view.
Correlating infrastructure and security events
Architecture & design
Define the events and contextual data needed to investigate infrastructure behavior.
Implementation & integration
Bring firewall telemetry together and correlate events with Catalyst Center information.
Validation & operations
Investigate errors and relationships across sources; interpret findings with engineering judgment.
Directory services, PKI and cryptographic trust
Architecture & design
Design authentication dependencies: domain controllers, certificate authorities, certificates and secure key exchange.
Implementation & integration
Connect Active Directory, RADIUS, TACACS+ and PKI to network access and device administration.
Validation & operations
Troubleshoot identity, certificate and trust-chain issues; document dependencies and validation procedures.
Automation & NetDevOps
Repeatable provisioning and controlled change, from declarative network models to APIs, assessments and lab configuration.
Declarative infrastructure and service orchestration
Architecture & design
Model Cisco ACI, tenants, VRFs, application profiles and supporting network constructs as code.
Implementation & integration
Automate multitenant provisioning, firewall objects and microsegmentation across hybrid platforms.
Validation & operations
Validate plans, dependencies, isolation and repeatability before changes reach a production fabric.
Inventory-driven configuration and repeatable labs
Architecture & design
Structure configuration tasks around inventory, intended state and reusable lab scenarios.
Implementation & integration
Provision laboratory and mock-up configurations through repeatable automation workflows.
Validation & operations
Validate expected configuration and behavior; preserve consistency across repeated deployments.
Infrastructure integrations and normalized data
Architecture & design
Design collection and integration workflows with consistent schemas and clear error handling.
Implementation & integration
Connect network tools, APIs, NETCONF and assessment pipelines; transform device output into usable data.
Validation & operations
Validate outputs, edge cases and controlled actions; make operational analysis repeatable.
Versioned architecture and automation
Architecture & design
Keep infrastructure definitions, configuration workflows and design artifacts under version control.
Implementation & integration
Structure changes so their scope, dependencies and rationale can be reviewed.
Validation & operations
Compare revisions and preserve decision history for repeatable delivery and troubleshooting.
Programmable network interfaces
Architecture & design
Define data models, access boundaries and API workflows for infrastructure integration.
Implementation & integration
Use APIC REST APIs, NETCONF and Python to collect data and provision network services.
Validation & operations
Validate responses and intended effects; separate read-only assessment from explicitly controlled changes.
Scoped tools between models and infrastructure
Architecture & design
Define tools and schemas that mediate every interaction between a local LLM and network devices.
Implementation & integration
Build MCP libraries for collection, normalized output and conversational network operations.
Validation & operations
Allow reads within scope and require explicit human confirmation before configuration changes.
Applied AI & local inference
Local intelligence connected to infrastructure through scoped tools, structured evidence and human engineering judgment.
Local model execution
Architecture & design
Keep inference close to infrastructure data with clear privacy and execution boundaries.
Implementation & integration
Connect local models to assessment workflows and the tools that provide operational context.
Validation & operations
Review model outputs, resource requirements and limitations; retain engineering ownership of decisions.
Conversational access to local intelligence
Architecture & design
Design an interface for querying infrastructure in natural language through a local LLM.
Implementation & integration
Connect the conversational workflow to scoped MCP tools and normalized network information.
Validation & operations
Validate use cases in internal and beta environments; require confirmation for configuration changes.
Tool-mediated access to live infrastructure
Architecture & design
Define what the model can request and how each tool returns consistent, interpretable information.
Implementation & integration
Collect device state and configuration through custom tools; keep the model from accessing devices directly.
Validation & operations
Enforce read/write boundaries and review actions before they reach network equipment.
Assessment analysis and reporting
Architecture & design
Structure infrastructure findings by configuration, security, topology and architecture.
Implementation & integration
Build normalization, vulnerability analysis, risk/impact matrices and remediation reporting workflows.
Validation & operations
Check findings against source evidence and structured interviews; retain engineer-in-the-loop review.
Evidence, context and hallucination control
Architecture & design
Organize relevant infrastructure information and retrieval context around the question being investigated.
Implementation & integration
Bring normalized data and structured operational inputs into the model workflow.
Validation & operations
Apply guardrails to inputs, outputs and interactions; distinguish evidence from generated interpretation.
Architecture design & documentation
A five-stage method: discovery, design, technical documents, commercial justification and final deliverables.
Precise architecture diagrams and original stencils
Architecture & design
Translate agreed concepts into physical and logical architecture, with detailed component and interface relationships.
Implementation & integration
Build diagrams using my own stencils; align topology, annotations and implementation considerations.
Validation & operations
Review consistency with HLD/LLD, interface tables and implementation requirements before delivery.
Interactive sketching with the client
Architecture & design
Sketch scenarios, dependencies and alternatives during architecture discussions and structured workshops.
Implementation & integration
Use iPad sketches and my templates to evolve concepts collaboratively before formal Visio diagrams.
Validation & operations
Validate shared understanding and preserve the reasoning behind the selected approach.
Technical instruments, interfaces and BOMs
Architecture & design
Structure component inventories, interface tables and bills of materials around the solution.
Implementation & integration
Document NIP requirements: rack space, power, thermal load, cabling, connectivity and power connectors.
Validation & operations
Check consistency between quantities, technical requirements, diagrams and implementation documents.
Technical and commercial communication
Architecture & design
Shape presentations around the architecture, business value and economic justification.
Implementation & integration
Explain solution choices, implementation implications and benefits to technical and business audiences.
Validation & operations
Review the narrative against technical documents and agreed scope before presenting to clients.
Traceable design decisions and delivery artifacts
Architecture & design
Organize design artifacts and decision records so changes retain their context.
Implementation & integration
Version working documents and related technical material alongside implementation work.
Validation & operations
Review revisions, preserve rationale and keep delivered documentation consistent with the agreed design.
My design tools and delivery method
Architecture & design
Structure discovery, workshops, information gathering and the five-stage architecture workflow.
Implementation & integration
Use original Visio stencils, GoodNotes templates, HLD/LLD and NIP instruments to support delivery.
Validation & operations
Review deliverables, train engineers and standardize implementation methods across the regional architecture team.