Professional Resume
Proven track record delivering secure, scalable network platforms across Azure and global enterprise environments.
Work Experience
Senior Infrastructure Engineer
- Transitioned corporate and OT LANs to a dual-hub, eBGP-routed hub-and-spoke fabric with five-tier automatic failover across redundant private circuits and an IPSec mesh backstop.
- Migrated the OT/SCADA environment across both hub sites to route-based (VTI) IPSec tunnels (33 per site), with eBGP-enabled tunnels providing dynamic routing across the mesh.
- Enforced strict IT/OT separation using per-VRF eBGP route domains, isolating SCADA and other critical OT systems onto dedicated private paths through targeted routing policy.
- Modernized the firewall routing platform, reworking BGP policy and multi-VRF design across the fabric.
- Migrated production workloads from managed PaaS hosting to GitOps-managed, fully IaC-provisioned Kubernetes, with per-environment autoscaling clusters and active/active production/DR clusters meshed for automatic cross-region load balancing.
- Automated cluster provisioning and access control via centralized identity (Microsoft Entra) and native Kubernetes RBAC.
- Codified the full network topology as version-controlled, Ansible-managed configuration across firewalls and switches, with Python automation for security-policy lifecycle management, enabling repeatable multi-site rollouts.
- Migrated the production virtualization platform from VMware ESXi to Azure Local.
Network Lead
- Architected and deployed Azure network topology for enterprise workloads.
- Administered global Check Point and Palo Alto firewall estates and rule lifecycles.
- Planned and scoped an SD-WAN migration and deployed centralized network management and automation.
- Standardized enterprise network and wireless designs across 13 global sites.
Network Administrator
- Stabilized core routing/switching and removed business-critical single points of failure.
- Redesigned global ERP network architecture and led the production rollout.
IT Support Engineer
- Automated recurring support fixes, standardized workstation deployments, and authored global IT SOPs.
Founder
- Lead a distributed dev team shipping quarterly releases (agile, Git/SVN) on MySQL/SQL Server backends.