services
Every engagement follows the same discipline: assessment, a plan with named risks, implementation support, validation, and a documented handoff. If a step carries risk, I say so.
book a session
Book online, pay securely, and get a Zoom link immediately. All times shown in your local timezone.
./discovery-call · 15 min
A free 15-minute call to talk through where you're at — no pitch, just a look at the problem and whether I can help.
./quick-review · 30 min
CAD
A focused 30-minute session for a single, well-defined question: a config review, a design sanity check, or a stuck troubleshooting step.
./deep-dive · 60 min
CAD
A 60-minute working session for migration planning, segmentation design, HA validation strategy, or a pre-change-window review.
// production note
Larger scopes — full migration programs, multi-site designs, NAC rollouts — start with a Deep-Dive session, then continue under a project engagement scoped in writing.
common questions
Not by default. Sessions are advisory — I review designs, configs, and plans, and I tell you exactly what to run and in what order. If you want hands-on implementation support during a change window, that's a project engagement scoped separately in writing.
Then book the Deep-Dive instead — it's 60 minutes and includes a written summary. If a Quick Review runs short of what you need, I'll say so early rather than at minute 29, and we can move to a longer session or a project scope.
Yes. I work under NDA on request — send it before the session and I'll sign it. I've spent 15+ years in a regulated financial-services environment, so handling sensitive topology and policy detail is routine. Sanitize what you're comfortable sanitizing; it rarely changes the advice.
I'm based in Toronto (America/Toronto), and booking slots are shown converted to your local timezone automatically. Evening slots are available on weekdays, which usually covers North American and European mornings.
A recommended next step you can act on, the specific risks in your current plan named explicitly, and the rollback path. Deep-Dive sessions also include a written summary afterward so you can circulate it to your team or change-advisory board.
If a paid session doesn't give you something useful, tell me within 48 hours and I'll refund it. I'd rather return the money than have you recommend against the work.
Palo Alto and Panorama, Cisco Nexus and IOS-XE routing, Aruba ClearPass and 802.1X, Infoblox DDI, and AlgoSec. If your question sits outside that, say so in the discovery call and I'll tell you honestly whether I'm the right person.
engagement areas
PAN-OS upgrade planning, HA pair validation, device-group and template architecture, GlobalProtect, policy governance, and Fortinet-to-Palo Alto migrations — the full lifecycle, from design review to cutover support.
Cisco Nexus refresh and migration planning, vPC and VRF design, BGP/OSPF/EIGRP troubleshooting, and QoS — validated against the failure modes that only show up at scale.
Aruba ClearPass rollouts, 802.1X and RADIUS/TACACS+ design, segmentation strategy, and AlgoSec-driven policy cleanup for rule bases that have sprawled for years.
AI-assisted MOPs, runbooks, and change planning, plus Python automation for config validation, device interaction, and reporting — applied to your actual operational workflow, not as a demo.
how an engagement runs
Assessment
Design / migration plan with named risks
Implementation support
Validation
Documented handoff (runbook)
ready when you are
Book a session directly, or start with a free 15-minute discovery call if you'd rather scope it out first.
