Networks

Architect of software-defined networks, high-availability edge infrastructure, and enterprise-grade network observability.

Overview

Network architect operating at the intersection of systems development and programmable infrastructure. While traditional networking remains trapped in manual CLI cycles, I treat the network as a software-defined API. My approach is defined by “Network-as-Code”—utilising a development-first mindset to build version-controlled, observable, and fully automated enterprise fabrics.

Network Metadata

I prioritise the integrity of DCIM and IPAM as the primary drivers of automation. By utilising NetBox as the authoritative “Source of Truth” for IP allocation, circuit tracking, and rack elevations, I ensure the digital map is the absolute master of the physical state. This kills manual configuration drift and provides the programmatic foundation for high-fidelity network orchestration.

Software-Defined Edge and Zero Trust

Specialising in the transition to software-driven edge security. I deploy modern defensive stacks including Wazuh, CrowdSec, and Prowler to ensure integrity at the perimeter. By implementing zero-trust micro-segmentation, I move the network beyond simple routing into a hardened, identity-aware security surface that is rapidly deployable and resilient by design.

Network Operations

Engineering high-fidelity telemetry stacks to support 24/7 Network Operations. From the early days with Zenoss to my modern Grafana stack, I provide a “single pane of glass” into mission-critical performance. I focus on proactive alerting and automated baselining, treating network health as a rigorous exercise in data platform engineering and high-availability operational observability.

Cloud

Implementing software-defined infrastructure-as-code network architectures across the AWS fabric by configuring multi-account connectivity via AWS Transit Gateway and VPC Peering. Concrete deployment involves partitioning networks using public and private subnets, managing traffic flows via Route Tables, Internet Gateways, and NAT Gateways, and securing boundaries using VPC Security Groups, Network ACLs (NACLs), and AWS WAF. Perimeter edge routing, content caching, and global DNS resolution are actively engineered using Route 53 latency/failover routing policies and CloudFront, while deep programmatic traffic analysis and threat auditing are achieved by capturing and parsing VPC Flow Logs via Amazon Athena.