Carlos AlvaradoTechnology Solutions Architect
Contact

Experience.
Evidence. Credentials.

Regional architecture leadership at GBM, across Central America and the Caribbean.

Professional overview

Architecture, led through delivery.

  • Regional leadership

    I lead GBM’s regional architecture team, including its senior Cisco ACI specialists.

  • Engineering discipline

    Assessments, client workshops, HLD/LLD, Visio diagrams and implementation planning.

  • Developing technical capability

    Engineer training, delivery methods and participation in Cisco’s LATAM Technology Leadership Council.

Explore my architecture process
Isometric conceptual illustration of interconnected data centers
Conceptual illustration

Regional SDN transformation

20+ institutions · 7 countries

Program reach reported in my project account.Explore the project

Trusted through collaboration.

“His ability to turn complex requirements into robust, scalable solutions aligned with the business, combined with deep technical knowledge, has been fundamental to the projects we have developed together.”
Ariel RamirezNetwork Administrator Leader

Colleague · different companies · August 14, 2026
Excerpt · translated from Spanish

Read recommendation View all 9 recommendations

Applied competencies

Select a domain, then a platform to explore its architecture, integration and validation scope.

Network architecture

Enterprise networks, from fabric to API

Data center & fabrics

Nexus and application-centric ACI; multi-pod, multi-site, VMM integration, VXLAN/EVPN and NDFC. Fabric boundaries, segmentation and migration planning.

Campus, WAN & identity

Catalyst, SD-Access and SD-WAN. BGP, OSPF, traffic engineering, convergence and high availability; integration with ISE, NAC and firewalls.

APIs & network automation

APIC REST APIs, NETCONF and Python integrations. Terraform service provisioning, Ansible configuration, normalized assessment data and controlled, validated changes.

Cloud-managed networks with consistent policy

LAN & wireless

Switching and wireless architecture for distributed sites, with a shared management model.

WAN & resilience

MX connectivity, SD-WAN, redundant uplinks, failover paths and hybrid-cloud integration.

Operations & integration

Dashboard-based operations, API integration and repeatable configuration across sites.

Enterprise campus and wireless architecture

Wired access

Campus switching, segmentation, uplink design and resilient access to services.

Wireless & RF

Wireless design, coverage evaluation, RF spectrum analysis and coexistence planning.

Identity & operations

Access policy, NAC integration, operational visibility and documented implementation requirements.

Routing, switching and interoperable networks

Routing policy

BGP, OSPF, route control and traffic engineering across network boundaries.

Switching & resilience

Layer 2/Layer 3 design, redundant paths, convergence and failure-domain planning.

Integration & validation

Multivendor interoperability, migration scenarios and validation before production changes.

Networking and security for virtualized platforms

Virtual networks

Logical networking, overlay connectivity and integration with the physical underlay.

Segmentation

Workload isolation, security policy and firewall integration for east–west traffic.

Hybrid architecture

Connectivity between virtualized workloads, data center services and hybrid-cloud environments.

Networking within the data center architecture

Physical connectivity

Server, storage and network connectivity; interface requirements and resilient uplinks.

Data center integration

Switching and Layer 3 boundaries within a multivendor infrastructure.

Implementation detail

Port mappings, cabling, capacity, rack dependencies and technical documentation.

Campus connectivity and multivendor integration

Campus networks

Wired and wireless infrastructure shaped around access, coverage and service requirements.

Segmentation & continuity

Network separation, resilient paths and consistent access to business services.

Architecture & delivery

Interoperability, migration planning, implementation documentation and validation.

Security integrated into the network architecture

Security boundaries

Firewall integration, network segmentation and explicit communication policies.

WAN & hybrid access

Secure connectivity, SD-WAN architecture and connectivity across distributed environments.

Operational visibility

Firewall telemetry, event-correlation requirements and integration with the wider security stack.

Network emulation and scenario validation

Topology modeling

Build representative network scenarios before applying changes to live infrastructure.

Protocol behavior

Inspect routing, overlays, convergence and recovery after deliberate path interruptions.

Repeatable labs

Use emulated environments for architecture validation, troubleshooting and technical training.

Practical network experiments and training

Network scenarios

Model routers, switches and connected services in controlled lab topologies.

Troubleshooting

Trace traffic, inspect protocol behavior and compare alternative configuration approaches.

Knowledge transfer

Turn repeatable experiments into technical explanations and hands-on training.

Explore regional SDN transformation Explore this expertise

Wireless & RF engineering

Enterprise Wi-Fi and industrial mobility

Architecture & design

Coverage and capacity planning; RF spectrum, interference, channel and power design. Cisco URWB, mesh and Wi-Fi 7 coexistence.

Implementation & integration

Wireless infrastructure, roaming and industrial backhaul; integration with 802.1X, identity services and the wired network.

Validation & operations

Infrastructure assessment, mobility and coexistence validation; troubleshooting methodology and advanced technical instruction.

Cloud-managed wireless across distributed sites

Architecture & design

Wireless coverage, capacity and site requirements within a cloud-managed network architecture.

Implementation & integration

Wireless and switching integration; consistent access policies and operational configuration across locations.

Validation & operations

Evaluate client experience, RF behavior and roaming; use monitoring to guide troubleshooting and improvements.

Campus wireless, RF and access integration

Architecture & design

Wireless coverage and capacity, mobility requirements and coexistence with the surrounding radio environment.

Implementation & integration

Connect wireless access to campus networking, segmentation and identity services.

Validation & operations

Assess infrastructure, spectrum and client connectivity; explain design trade-offs through structured workshops.

Wireless architecture in multivendor environments

Architecture & design

Plan access, coverage and capacity around the devices, applications and physical environment.

Implementation & integration

Integrate wireless infrastructure with wired access, segmentation and security requirements.

Validation & operations

Evaluate RF conditions, roaming and interoperability; document the implementation and operating procedures.

RF analysis and wireless assessment

Architecture & design

Study coverage, capacity, interference and channel use to inform the wireless design.

Implementation & integration

Translate assessment findings into placement, channel, power and coexistence considerations.

Validation & operations

Evaluate spectrum and infrastructure behavior; teach assessment methods and interpretation of RF evidence.

Explore port connectivity Explore this expertise

Hybrid cloud & platforms

Azure within the hybrid architecture

Architecture & design

Plan cloud connectivity, routing boundaries and consumption of services alongside the data center.

Implementation & integration

Integrate Azure connectivity with enterprise WAN, security policy and multicloud interconnection.

Validation & operations

Evaluate paths, convergence and connectivity dependencies; document operation and recovery considerations.

AWS connected to enterprise services

Architecture & design

Design cloud access and service-consumption paths across on-premise and multicloud environments.

Implementation & integration

Integrate WAN and cloud connectivity with segmentation, security boundaries and routing policy.

Validation & operations

Validate path behavior, service reachability and infrastructure dependencies under change.

GCP and on-premise service integration

Architecture & design

Design hybrid connectivity, routing boundaries and workload access across the enterprise environment.

Implementation & integration

Connect cloud routing and interconnection to data center fabrics, firewalls and services.

Validation & operations

Validate connectivity and failover scenarios; document replication and application traffic considerations.

IBM Cloud and service orchestration

Architecture & design

Structure hybrid connectivity and service dependencies across compute, storage and networking.

Implementation & integration

Integrate network automation with IBM Cloud Orchestrator and multitenant service provisioning.

Validation & operations

Validate isolation, repeatability and end-to-end service creation across infrastructure layers.

Oracle Cloud in a multicloud environment

Architecture & design

Plan service connectivity and routing within an architecture spanning multiple cloud providers.

Implementation & integration

Integrate cloud access with enterprise WAN and carrier-neutral interconnection where required.

Validation & operations

Review convergence, traffic profiles and operational dependencies across provider boundaries.

Cloudflare as an access layer

Architecture & design

Define the relationship between Internet access, published services and the internal environment.

Implementation & integration

Integrate Cloudflare services with lab workloads and the surrounding network architecture.

Validation & operations

Observe service availability and access dependencies while keeping internal infrastructure details private.

Virtual infrastructure and physical fabric integration

Architecture & design

Design virtual networking, workload connectivity, availability and physical infrastructure dependencies.

Implementation & integration

Integrate virtual domains with Cisco ACI and connect virtualized services to storage and security.

Validation & operations

Validate migration paths, connectivity and failure boundaries; document operational requirements.

Hyperconverged platforms within the wider architecture

Architecture & design

Plan network, compute and storage relationships for virtualized workloads and hybrid environments.

Implementation & integration

Integrate platform connectivity with data center fabrics, security policy and enterprise services.

Validation & operations

Review capacity, availability and recovery dependencies; validate integration before handover.

Virtual machines and repeatable lab environments

Architecture & design

Plan VM placement, connectivity, storage and resource allocation for practical infrastructure experiments.

Implementation & integration

Run virtualized services and network-emulation environments; integrate bridges, storage and monitoring.

Validation & operations

Observe guest resource usage and availability; distinguish assigned capacity from measured consumption.

Microservices, service networking and isolation

Architecture & design

Design workload connectivity, microsegmentation, persistent storage and availability boundaries.

Implementation & integration

Automate provisioning with Terraform and integrate container networking with hybrid infrastructure.

Validation & operations

Validate service reachability, isolation and repeatable deployment; inspect workload and platform dependencies.

Application platforms integrated with enterprise infrastructure

Architecture & design

Plan container-platform connectivity, security boundaries and hybrid service dependencies.

Implementation & integration

Integrate OpenShift environments with automated provisioning and workload segmentation.

Validation & operations

Review network policy, service communication and implementation requirements with the delivery team.

Cloud infrastructure with explicit network boundaries

Architecture & design

Design relationships between virtual networking, compute, storage and enterprise connectivity.

Implementation & integration

Integrate cloud environments with data center fabrics, segmentation and hybrid services.

Validation & operations

Validate infrastructure dependencies and connectivity; document implementation and operational trade-offs.

Container services and Docker Swarm

Architecture & design

Plan service placement, overlay networking, persistence and availability across ARM cluster nodes.

Implementation & integration

Deploy and configure lab workloads; integrate storage, ingress and observability services.

Validation & operations

Inspect service health, replica placement and resource usage; assess recovery and single-instance dependencies.

IBM Power and LPAR integration

Architecture & design

Plan partitioned workloads, connectivity and infrastructure dependencies within hybrid architectures.

Implementation & integration

Integrate Power/LPAR environments with data center networking and automated provisioning workflows.

Validation & operations

Validate connectivity, isolation and physical implementation requirements across the solution.

Explore multicloud interconnection Explore this expertise

Security & identity

Cisco ISE and identity-based network access

Architecture & design

Design NAC and 802.1X around identity, PKI, RADIUS, TACACS+ and directory dependencies.

Implementation & integration

Integrate ISE, network devices, certificate authorities and domain controllers with the delivery team.

Validation & operations

Validate authentication paths, authorization and administrative access; troubleshoot certificates and secure key exchange.

Network context for security operations

Architecture & design

Connect network topology, access context and operational visibility to security analysis.

Implementation & integration

Correlate Catalyst Center information with firewall data and Splunk events.

Validation & operations

Investigate infrastructure errors and events with network context; document interpretation and operating procedures.

Firewall policy within software-defined infrastructure

Architecture & design

Design trust boundaries, segmentation and permitted communication across application environments.

Implementation & integration

Integrate Palo Alto firewalls with SDN, data center fabrics and hybrid connectivity.

Validation & operations

Validate policy and traffic paths; identify telemetry and troubleshooting requirements.

Security enforcement across infrastructure boundaries

Architecture & design

Structure firewall placement, segmentation and communication policy around the architecture.

Implementation & integration

Integrate Check Point environments with network fabrics, enterprise connectivity and services.

Validation & operations

Review policy behavior, resilience and operational visibility during implementation and change.

Network and security integration

Architecture & design

Design firewall boundaries, segmentation, distributed connectivity and SD-WAN requirements.

Implementation & integration

Integrate Fortinet security with multivendor networks and enterprise services.

Validation & operations

Validate access paths and policy; connect relevant firewall telemetry to wider event analysis.

Security controls in my real lab

Architecture & design

Define controlled access and segmentation for a laboratory used to validate architecture concepts.

Implementation & integration

Integrate the pfSense appliance with Internet connectivity and internal services.

Validation & operations

Observe availability and network behavior while withholding private security configuration from the public view.

Correlating infrastructure and security events

Architecture & design

Define the events and contextual data needed to investigate infrastructure behavior.

Implementation & integration

Bring firewall telemetry together and correlate events with Catalyst Center information.

Validation & operations

Investigate errors and relationships across sources; interpret findings with engineering judgment.

Directory services, PKI and cryptographic trust

Architecture & design

Design authentication dependencies: domain controllers, certificate authorities, certificates and secure key exchange.

Implementation & integration

Connect Active Directory, RADIUS, TACACS+ and PKI to network access and device administration.

Validation & operations

Troubleshoot identity, certificate and trust-chain issues; document dependencies and validation procedures.

Explore security telemetry & identity Explore this expertise

Automation & NetDevOps

Declarative infrastructure and service orchestration

Architecture & design

Model Cisco ACI, tenants, VRFs, application profiles and supporting network constructs as code.

Implementation & integration

Automate multitenant provisioning, firewall objects and microsegmentation across hybrid platforms.

Validation & operations

Validate plans, dependencies, isolation and repeatability before changes reach a production fabric.

Inventory-driven configuration and repeatable labs

Architecture & design

Structure configuration tasks around inventory, intended state and reusable lab scenarios.

Implementation & integration

Provision laboratory and mock-up configurations through repeatable automation workflows.

Validation & operations

Validate expected configuration and behavior; preserve consistency across repeated deployments.

Infrastructure integrations and normalized data

Architecture & design

Design collection and integration workflows with consistent schemas and clear error handling.

Implementation & integration

Connect network tools, APIs, NETCONF and assessment pipelines; transform device output into usable data.

Validation & operations

Validate outputs, edge cases and controlled actions; make operational analysis repeatable.

Versioned architecture and automation

Architecture & design

Keep infrastructure definitions, configuration workflows and design artifacts under version control.

Implementation & integration

Structure changes so their scope, dependencies and rationale can be reviewed.

Validation & operations

Compare revisions and preserve decision history for repeatable delivery and troubleshooting.

Programmable network interfaces

Architecture & design

Define data models, access boundaries and API workflows for infrastructure integration.

Implementation & integration

Use APIC REST APIs, NETCONF and Python to collect data and provision network services.

Validation & operations

Validate responses and intended effects; separate read-only assessment from explicitly controlled changes.

Scoped tools between models and infrastructure

Architecture & design

Define tools and schemas that mediate every interaction between a local LLM and network devices.

Implementation & integration

Build MCP libraries for collection, normalized output and conversational network operations.

Validation & operations

Allow reads within scope and require explicit human confirmation before configuration changes.

Explore ACI infrastructure as code Explore this expertise

Applied AI & local inference

Local model execution

Architecture & design

Keep inference close to infrastructure data with clear privacy and execution boundaries.

Implementation & integration

Connect local models to assessment workflows and the tools that provide operational context.

Validation & operations

Review model outputs, resource requirements and limitations; retain engineering ownership of decisions.

Conversational access to local intelligence

Architecture & design

Design an interface for querying infrastructure in natural language through a local LLM.

Implementation & integration

Connect the conversational workflow to scoped MCP tools and normalized network information.

Validation & operations

Validate use cases in internal and beta environments; require confirmation for configuration changes.

Tool-mediated access to live infrastructure

Architecture & design

Define what the model can request and how each tool returns consistent, interpretable information.

Implementation & integration

Collect device state and configuration through custom tools; keep the model from accessing devices directly.

Validation & operations

Enforce read/write boundaries and review actions before they reach network equipment.

Assessment analysis and reporting

Architecture & design

Structure infrastructure findings by configuration, security, topology and architecture.

Implementation & integration

Build normalization, vulnerability analysis, risk/impact matrices and remediation reporting workflows.

Validation & operations

Check findings against source evidence and structured interviews; retain engineer-in-the-loop review.

Evidence, context and hallucination control

Architecture & design

Organize relevant infrastructure information and retrieval context around the question being investigated.

Implementation & integration

Bring normalized data and structured operational inputs into the model workflow.

Validation & operations

Apply guardrails to inputs, outputs and interactions; distinguish evidence from generated interpretation.

Explore AI-assisted assessments Explore this expertise

Architecture design & documentation

Precise architecture diagrams and original stencils

Architecture & design

Translate agreed concepts into physical and logical architecture, with detailed component and interface relationships.

Implementation & integration

Build diagrams using my own stencils; align topology, annotations and implementation considerations.

Validation & operations

Review consistency with HLD/LLD, interface tables and implementation requirements before delivery.

Interactive sketching with the client

Architecture & design

Sketch scenarios, dependencies and alternatives during architecture discussions and structured workshops.

Implementation & integration

Use iPad sketches and my templates to evolve concepts collaboratively before formal Visio diagrams.

Validation & operations

Validate shared understanding and preserve the reasoning behind the selected approach.

Technical instruments, interfaces and BOMs

Architecture & design

Structure component inventories, interface tables and bills of materials around the solution.

Implementation & integration

Document NIP requirements: rack space, power, thermal load, cabling, connectivity and power connectors.

Validation & operations

Check consistency between quantities, technical requirements, diagrams and implementation documents.

Technical and commercial communication

Architecture & design

Shape presentations around the architecture, business value and economic justification.

Implementation & integration

Explain solution choices, implementation implications and benefits to technical and business audiences.

Validation & operations

Review the narrative against technical documents and agreed scope before presenting to clients.

Traceable design decisions and delivery artifacts

Architecture & design

Organize design artifacts and decision records so changes retain their context.

Implementation & integration

Version working documents and related technical material alongside implementation work.

Validation & operations

Review revisions, preserve rationale and keep delivered documentation consistent with the agreed design.

My design tools and delivery method

Architecture & design

Structure discovery, workshops, information gathering and the five-stage architecture workflow.

Implementation & integration

Use original Visio stencils, GoodNotes templates, HLD/LLD and NIP instruments to support delivery.

Validation & operations

Review deliverables, train engineers and standardize implementation methods across the regional architecture team.

Explore my five-stage design process Explore this expertise

Certifications & badges

28 certifications & badgesCredentials and learning milestones earned throughout my career.

Explore my Credly profile