Senior Network Security Architect | Enterprise Network Architect | Cisco CCIE / CCDE

Network Security Architecture
Design and implementation of enterprise network security architectures covering Cisco Secure Firewall/FTD, ISE/NAC, SD-WAN, ACI, Nexus, routing, switching, VPN, segmentation and hybrid cloud connectivity, with 20+ years of hands-on experience.

Cisco SD-WAN
Architecture and troubleshooting of multi-controller Cisco SD-WAN deployments using vManage, vBond and vSmart across MPLS and Internet transports, including control-plane, PKI, NAT, routing and tunnel establishment.

Cisco ISE / NAC
Design and operation of Cisco ISE/NAC environments for enterprise access control, 802.1X, posture, TrustSec/SXP, guest/BYOD and endpoint compliance workflows.

Cisco ACI / Data Center
Design and implementation of Cisco ACI data-center environments using APIC, Nexus, VXLAN/EVPN, tenant/VRF segmentation, contracts and firewall integration.

Hybrid Cloud Networking
Design of hybrid-cloud network connectivity for Azure and AWS, including VPN, routing, security controls and enterprise segmentation using Azure VNet, Azure Firewall, VPN Gateway and AWS VPC.

Firewall & Security Policy
Implementation and troubleshooting of Cisco Secure Firewall ASA/FTD/FMC, Palo Alto and Fortinet solutions including security policy, NAT, VPN, routing, high availability and traffic analysis.

Routing & Switching
Deep expertise in BGP, OSPF, EIGRP, MPLS, VRF, VLAN, STP, VXLAN/EVPN and QoS across Cisco IOS/IOS-XE, NX-OS platforms including Nexus, Catalyst, ISR, ASR and C8500/C8300 series.

Data Center Virtualization
Architecture and support of main and DR data-center environments using Nutanix AHV/Prism, VMware, Veeam, Dell EMC and Cisco Nexus networking.

Zero Trust / Segmentation
Design and implementation of Zero Trust and network segmentation architectures including SASE/ZTNA, TrustSec/SXP and micro-segmentation across enterprise environments.

Network Troubleshooting & Performance Optimization
Optimization of network paths and architectures resulting in significantly lower latency and higher data-transfer performance, as well as incident response and performance and capacity optimization.