Network Architect & NetDevOps Engineer
I build the networks a global enterprise runs on: campus, WAN, wireless, and identity, from design through cutover.
20 years in enterprise networking. I designed the Cisco ISE platform behind 60,000+ endpoints and led the move of about 900 access points from Meraki to Catalyst 9800, site by site.
Security · Identity Lead case study
Started the 802.1X initiative, then designed the identity platform that now authenticates 60K+ endpoints across five global datacenters.
The repeatable process that repointed a TACACS estate onto a parallel-built ISE 3.x.
Re-architected global enterprise wireless from cloud-managed Meraki to Catalyst 9800, site by site.
Python tools and Ansible playbooks with NetBox as the source of truth.
Global ASA and FTD SSL VPN where every session clears Azure MFA and an ISE posture check.
I design and run the enterprise networks thousands of people rely on to do their jobs: campus switching, global WAN, wireless, and identity.
When my work goes well, users don't have to think about the network, which is the point.
Every network change I run follows the same four steps:
The monitor-first rollout that grew into 60K+ endpoints behind 802.1X.
How I moved 45,000 endpointsA 1,500+ device TACACS estate and 190 WLANs, repointed onto a parallel-built ISE 3.x.
Global AAA migrationAbout 900 access points moved from Meraki to Catalyst 9800, site by site.
The migration workbookPython tools and Ansible playbooks engineers can run without touching git.
The NetDevOps toolkitRetiring an end-of-life VSS core meant new hardware and a new virtual-chassis technology. The BGP redundancy model built on top of it didn't have to change.
A platform where engineers run automation as a shell command, not a git workflow, NetBox stays the single source of truth, and no secrets touch the repo.
About 900 Meraki access points migrated to sixteen Catalyst 9800 controllers (now roughly 1,000 after density-driven additions), 190 WLANs across four regional datacenters, and a quiet AAA migration to a parallel-built ISE 3.x environment. The method: audit first, pre-stage everything, cut over with the radios.
Starting a Cisco ISE initiative from scratch, the architecture decisions that carried it from a 4-node cluster to 14 nodes across five global datacenters, and the monitor-first rollout that grew into 60K+ endpoints behind 802.1X.
Hiring for a network role, or solving a network problem?
Whether it’s a senior role, a consulting project, or comparing notes, I reply within two working days. My résumé is available on request.
Message sent.
I read everything that comes through here and reply within two working days.
