08/27/2026 updated
20 % partially available
Network & Security Architect | Cisco ISE/NAC, FTD/FMC, ACI, Switching/Routing | Enterprise & OT
Zagreb, Croatia
Only remote
About me
I work on networks where the office side and the production side meet, and where a misconfiguration means a line stops rather than an email arriving late. Most of my work is design, migration and troubleshooting for manufacturing and enterprise environments, often outside business hours.
ProxmoxIEEE 802.1XMicrosoft AzureBorder Gateway ProtocolCisco Certified Network ProfessionalLinuxInternet Protocol Security (IP SEC)Virtual Private Networks (VPN)Linux AdministrationRoutingCisco Nexus SwitchesOpen Shortest Path FirstRemote Authentication Dial in User Service (RADIUS)Terminal Access Controller Access-Control System (TACACS)Virtualization
Network and security architect with 13+ years of experience designing, migrating and operating enterprise and industrial networks. I work as an independent contractor through my own limited company registered in Croatia, typically on design, migration and troubleshooting engagements delivered remotely, including scheduled maintenance windows.
CORE EXPERTISE
Network Access Control / Identity
Cisco Identity Services Engine (ISE) - greenfield deployments and migrations, distributed deployments, 802.1X and MAB, wired and wireless authentication, TACACS+ device administration, RADIUS, posture assessment, Change of Authorization (CoA), profiling, guest access, pxGrid integration, certificate-based authentication
and PKI integration.
Firewalls and Perimeter Security
Cisco Secure Firewall (FTD) and Firepower Management Center (FMC), Cisco ASA, ASA-to-FTD migrations, Check Point, Fortinet FortiGate, site-to-site and remote access VPN, IPsec, rule base cleanup and policy consolidation, multi-vendor firewall migrations.
Data Center and Routing
Cisco ACI including Multi-Site, Nexus, VXLAN, BGP, OSPF, EIGRP, HSRP/VRRP, VRF and route leaking, campus and data center switching (Catalyst, Nexus), QoS, network redesign and refresh projects.
OT / IT Segmentation and Industrial Networks
Segmentation between office and production networks, secure remote access for machine vendors, asset discovery and visibility in OT environments, Purdue model based zoning, legacy plant network assessment and redesign, alignment with national cybersecurity legislation.
Wireless and Multi-Vendor
Enterprise wireless design and troubleshooting, Juniper, MikroTik, F5, multi-vendor environments.
Virtualization, Cloud and Systems
Proxmox VE, VMware ESXi, VMware-to-Proxmox migrations, Linux, Microsoft Azure networking (VNet, VPN Gateway, NSG, hybrid connectivity).
TYPICAL ENGAGEMENTS
Network and security assessments, ISE and NAC rollouts, firewall refresh and migration projects, data center network design, OT/IT segmentation projects, architecture reviews and second opinions, remote troubleshooting and escalation support.
CERTIFICATION
Cisco CCNP Enterprise (active). Practical experience with Fortinet and Azure networking without current active certification.
LANGUAGES
Croatian (native), English (professional working proficiency).
Experience
Professional experience10+ years
Freelancer since2022
Languages
EnglishFluentCroatianNative speaker