01
Palo Alto & Panorama
PAN-OS upgrades, HA validation, device groups, GlobalProtect, policy governance, Fortinet-to-PAN migration.
- PAN-OS
- Panorama
- GlobalProtect
- HA pairs
Toronto, ON · replies within 1 business day
Deploy, migrate, and troubleshoot enterprise infrastructure
Senior-level consulting for Palo Alto, Panorama, Cisco Nexus, and Aruba ClearPass — built from 15+ years securing a 70-branch financial institution, and sharpened with AI-assisted operations and Python automation.
- years in production
- branches secured
- Palo Alto firewalls
- users supported
$ show experience --summary
15+ yrs · Senior Network & Security Engineer
Financial services · 40 firewalls · 100 Nexus switches
PCNSE · CCNP · CCIE Written · AI Consultant · Python
$ ▊
- Palo Alto Networks
- Panorama
- Cisco Nexus
- NX-OS
- Aruba ClearPass
- AlgoSec
- Infoblox
- GlobalProtect
- BGP / OSPF / EIGRP
- 802.1X / RADIUS
- Prisma Access
- Python Automation
Certified
- PCNSE
- CCNP
- CCIE Written
- AI Consultant
- Python
the production-proven path
A plan, not a pitch.
Every resource is built from real production deployments — not vendor marketing or lab-only simulations. No fluff. No upsell padding. If a step carries risk, I say so.
./learn
Learn the concept
Watch a focused walkthrough built from a real deployment — not a lab demo.
./reference
Reference the cheat sheet
Exact CLI syntax, GUI steps, and validation checklists when you need them fast.
./apply
Apply it with confidence
Implement in your own environment using documented, repeatable steps.
./consult
Consult when stakes are high
1:1 review for design validation, migration planning, or troubleshooting before a critical change window.
expertise
Multi-platform depth, one operator.
Most teams have to assemble this from three different vendors' specialists. Here it's one person who has run all of it in the same production estate.
02
Cisco Nexus & Routing
NX-OS, vPC, VRF, STP, QoS, BGP/OSPF/EIGRP design and troubleshooting, Nexus refresh planning.
- NX-OS
- vPC
- BGP
03
NAC & Access Security
Aruba ClearPass, 802.1X, RADIUS/TACACS+, segmentation strategy, AlgoSec policy management.
- ClearPass
- 802.1X
04
Infrastructure Operations
Infoblox DNS/DHCP/IPAM, change management discipline, runbooks, root cause analysis, ITIL practice.
- Infoblox
- DDI
- Change management
- ITIL
05
AI for Network Engineering
AI-assisted MOPs, runbooks, change planning, and documentation — practical automation readiness, not hype.
- MOP generation
- Runbooks
- Change planning
06
Automation with Python
Config validation, API-driven device interaction, bulk changes, and report generation that cut manual toil.
- Python
- REST APIs
// positioning
Enterprise network and security engineering, explained by someone who's run it at scale.
consulting sessions
Straightforward pricing.
Book online, pay securely, and get a Zoom link immediately. Start free if you're not sure which fits.
./discovery-call · 15 min
Discovery Call
A free 15-minute call to talk through where you're at — no pitch, just a look at the problem and whether I can help.
Book Free Call — Discovery Call./quick-review · 30 min
Quick Review
CAD
A focused 30-minute session for a single, well-defined question: a config review, a design sanity check, or a stuck troubleshooting step.
Book This Session — Quick Review./deep-dive · 60 min
Deep-Dive Consultation
CAD
A 60-minute working session for migration planning, segmentation design, HA validation strategy, or a pre-change-window review.
Book This Session — Deep-Dive Consultationwalkthroughs
From the change window to you.
Focused YouTube walkthroughs of real deployments: the GUI and CLI method, the validation step, and what could go wrong — with rollback.
// coming soon
Palo Alto HA Failover: How to Validate It Before You Trust It
// coming soon
Panorama Device Groups: Structure That Survives an Audit
// coming soon
Nexus vPC: The Failure Modes Nobody Demos
track record
Why this advice is worth taking.
- years in production
- branches secured
- Palo Alto firewalls
- users supported
Verified credentials
- PCNSE
- CCNP
- CCIE Written
- AI Consultant
- Python
// what you leave with
- The specific risks in your current plan, named — not a generic checklist
- A rollback path you can hand to whoever is on call that night
- The GUI and CLI route for every step, so it's reproducible without me
common questions
Before you book.
Do you touch my production environment?
Not by default. Sessions are advisory — I review designs, configs, and plans, and I tell you exactly what to run and in what order. If you want hands-on implementation support during a change window, that's a project engagement scoped separately in writing.
What if 30 minutes isn't enough?
Then book the Deep-Dive instead — it's 60 minutes and includes a written summary. If a Quick Review runs short of what you need, I'll say so early rather than at minute 29, and we can move to a longer session or a project scope.
Can I share confidential network details?
Yes. I work under NDA on request — send it before the session and I'll sign it. I've spent 15+ years in a regulated financial-services environment, so handling sensitive topology and policy detail is routine. Sanitize what you're comfortable sanitizing; it rarely changes the advice.
What timezone are sessions in?
I'm based in Toronto (America/Toronto), and booking slots are shown converted to your local timezone automatically. Evening slots are available on weekdays, which usually covers North American and European mornings.
before your next change window
Planning a migration, redesigning segmentation, or staring down a high-stakes cutover?
Bring in a second set of eyes that has already done it at scale, under real constraints. Book a consultation — or start with a free 15-minute discovery call.