Services

Enterprise networking & security services

Design, build, secure, and advise — delivered directly by an engineer with more than two decades of experience. No hand-offs to junior staff.

Network Design & Build

Campus switching and routing, wireless, segmentation, and WAN — designed for performance and built to be managed.

Whether it’s a new building, a district-wide refresh, or a network that grew one closet at a time, I design infrastructure that’s fast, documented, and easy for your team to operate.

  • Architecture and design for campus, branch, and data center networks
  • Switching, routing, and VLAN / VRF segmentation
  • Enterprise wireless design, surveys, and deployment
  • WAN, SD-WAN, and multi-site connectivity
  • Hardware refresh planning, migrations, and cutovers
  • As-built documentation and network diagrams

Firewall & NGFW

Next-generation firewall design, migrations, policy cleanup, and health checks — with deep Palo Alto Networks experience.

Your firewall is only as good as its policy. I build and tune next-generation firewalls so they actually enforce what you intend — and nothing you don’t.

  • New firewall design and deployment
  • Migrations between platforms and versions
  • Rule base review, cleanup, and least-privilege redesign
  • App-ID, User-ID, decryption, and threat prevention tuning
  • VPN, remote access, and zero-trust segmentation
  • Health checks and best-practice assessments

Security Assessments

Find the gaps before someone else does: network, firewall, and wireless assessments with clear, prioritized findings.

An assessment should end with a plan, not a pile of scanner output. You get findings ranked by real-world risk and practical steps to fix them.

  • Network and infrastructure security assessments
  • Vulnerability scanning and validation
  • Firewall and segmentation reviews
  • Wireless security audits
  • Configuration hardening against industry benchmarks
  • Executive summary plus a technical remediation roadmap

vCISO & Advisory

Fractional security leadership: strategy, policy, incident response planning, and a roadmap leadership can act on.

Not every organization needs a full-time CISO, but every organization needs someone accountable for security. I fill that role on a schedule that fits your budget.

  • Security program development and roadmaps
  • Policies, standards, and procedures
  • Incident response planning and tabletop exercises
  • Risk assessments and framework alignment (e.g. CIS Controls)
  • Vendor and technology evaluations
  • Board and leadership briefings
Engagements

Work together the way that fits.

Projects

A defined scope with clear deliverables — a new build, a migration, or an assessment.

Ongoing advisory

Recurring vCISO or senior engineering time for organizations that need steady guidance.

Expert backup

Escalation support for your in-house team when something is broken or the stakes are high.

Platforms

Vendor experience

Palo Alto Networks Cisco Aruba Juniper HPE UniFi

Let’s talk about your network.

Tell me what you’re working on — a new build, a firewall that’s grown out of control, an audit on the horizon, or a team that needs training. The first conversation is on me.