Case studies

Five projects from a global enterprise network: what the problem was, what I did about it, and what it changed.

  1. Security · Identity

    Cisco ISE, built from the ground up

    Started the 802.1X initiative, then designed the identity platform that now authenticates 60K+ endpoints across five global datacenters.

    Endpoints authenticated
    60K+
    ISE nodes
    14
  2. NetDevOps

    Global AAA migration

    The repeatable process that moved 190 WLANs onto a parallel-built ISE 3.x, and the pipeline built to repoint a 1,500+ device TACACS estate.

    Device estate in scope
    1,500+
    WLANs moved
    190
  3. Architecture

    Meraki to Catalyst 9800

    Re-architected global enterprise wireless from cloud-managed Meraki to sixteen Catalyst 9800 controllers, then cut over 900 APs site by site.

    APs cut over
    ~900
    Controllers
    16
  4. NetDevOps

    The NetDevOps toolkit

    A shared automation platform: Python tools and Ansible playbooks with NetBox as the source of truth, delivered so engineers can run them without touching git.

    Source of truth
    1
    Secrets in the repo
    0
  5. Security · Identity

    The remote-access stack

    Global ASA and FTD SSL VPN headends where every session clears Azure MFA and an ISE posture check, anchored by a three-node load-balancing cluster I have owned for over three years.

    Nodes in the VPN cluster
    3
    Sessions on password alone
    0

Have a network problem like one of these?

Hiring or consulting? I reply within two working days, and my résumé is available on request.

Get in touch