using WordPress and A showcase of network engineering projects I’ve built and led, from enterprise network modernization, SD-WAN and PRI-to-SIP migration to personal Python tools. See also my automation builds. More write-ups are on the way.
Network engineering project highlights
PRI to SIP Migration
Led the move from legacy PRI lines to SIP trunks across 34 remote facilities for a critical infrastructure company, cutting telecom costs by roughly $200K per year while modernizing voice infrastructure. Phone numbers and dial plans were ported from various local carriers to a single carrier providing digital SIP trunks. User dialing behavior and phone configurations moved to a centralized call control platform, replacing site-by-site PRI gateways.
- Ported numbers and dial plans from multiple local carriers to one SIP provider (LNP)
- Centralized call control on a 3-node Cisco Unified Communications Manager (CUCM) cluster
- Terminated SIP trunks centrally on 4 Cisco CUBE session border controllers
- Consolidated and retired legacy PRI gateways
- Improved resiliency through centralized trunking and simplified carrier management to one provider
- Laid groundwork for a later cloud calling move: 7xxx-series to 8xxx/9xxx-series phone refresh, UC server upgrades, and a configured Webex Calling tenant
Tech: Cisco CUCM, Cisco CUBE, SIP, PRI/T1, number porting (LNP)
Python Network Monitoring Tools
Custom Python tools I write to monitor network health and surface issues before they become outages. They support 24×7 operations for roughly 2,000 critical devices across about 220 IT/OT sites for a critical infrastructure company, including routers, switches, firewalls, load balancers, identity services and industrial IoT. Paired with consistent configurations and disciplined execution, this work helped reduce network outages by 40%.
- Built homegrown tools that watch SD-WAN and transport health
- Developed custom tools and processes that improve network monitoring, reliability and uptime
- Reduced network outages by 40% through consistent configurations and disciplined execution
- Diagnosed a years-long SCADA/telemetry (MQTT) network problem by tuning packet/segment size (MTU/MSS)
- Earlier, at a managed service provider, developed proprietary monitoring tools and custom software for voice and network endpoints
- Supported 4,000+ hosted endpoints under a 100% uptime SLA
Tech: Python, PHP, JavaScript/Node.js, MySQL/PostgreSQL, MQTT, SD-WAN
SD-WAN at Scale
I am currently leading the implementation of Palo Alto Prisma SD-WAN for a critical national infrastructure company, spanning about 220 IT/OT sites in a regulated, zero-trust environment. The effort includes migrating the network away from a legacy DMVPN design to Prisma SD-WAN. Before that, as a senior solutions engineer at value-add resellers, I architected, designed and deployed numerous SD-WAN and SASE solutions for customers.
- Leading the implementation of Palo Alto Prisma SD-WAN across ~220 IT/OT sites
- Leading the migration from a legacy DMVPN network to Prisma SD-WAN
- Operate in a regulated, zero-trust IT/OT environment
- Architected, designed and deployed numerous SD-WAN and SASE solutions at value-add resellers
- Hands-on with Cisco Viptela, Versa, Palo Alto SD-WAN and Prisma Access
- Cloud networking in Azure and GCP, including ExpressRoute and OTT VPNs
- Work with cross-functional teams on IT/OT network security processes
Tech: Palo Alto Prisma SD-WAN, Palo Alto Prisma Access, Cisco Viptela, Versa, SASE, DMVPN, Azure ExpressRoute, GCP
More projects
Coming soon
Project write-up in progress.
Coming soon
Project write-up in progress.
Coming soon
Project write-up in progress.