Notable wins
-
Restored wireless access for 100+ users within an hour
Production wireless network, Oct 2026
Ended a weekend-long outage for 100+ users about one hour after starting on it.
How it went
- Problem
- After an SSID was moved to bridge mode, it was tagged with the wrong VLAN. Clients connected but never received DHCP leases, and the network was down all weekend.
- What I did
- Led the troubleshooting, traced the failure to the VLAN assignment on the bridged SSID and corrected it.
-
Ended a complete network outage at a medical facility
Medical facility network with 14 managed FortiSwitches
Restored service to all 14 switches and brought the whole facility back online.
How it went
- Problem
- All 14 FortiSwitches dropped off FortiLink and the facility lost its network entirely.
- What I did
- Diagnosed the cause as a firmware bug, then worked through the FortiLink and CAPWAP state on each switch to bring them back under firewall management.
-
Found the real cause of slow internet at headquarters
Dual-circuit SD-WAN site
Proved an ISP provisioning fault and delivered a fix plan with weighted balancing and traffic segmentation.
How it went
- Problem
- Users saw inconsistent speeds under 100 Mbps.
- What I did
- Used SD-WAN health checks to show one circuit running near 5 Mbps with jitter over the SLA threshold, and found traffic was being balanced evenly across two very different circuits.
-
Fixed a site-to-site VPN that refused to pass traffic
Two-site FortiGate IPsec tunnel
Brought the tunnel up with matching selectors on both sides.
How it went
- Problem
- The tunnel kept logging "no policy configured" IKE errors.
- What I did
- Compared the phase 2 selector configs on both firewalls and corrected the mismatch.
-
Wrote the playbook for zero-downtime SSO certificate renewals
Salesforce SSO through Microsoft Entra ID
Turned renewals into a repeatable procedure anyone on the team can follow without an outage.
How it went
- Problem
- SAML certificate renewals were a manual, risky process with no written procedure.
- What I did
- Mapped which certificate lives where, designed a pre-stage then cutover approach, and wrote an SOP plus a script and KB article for CRT to PFX conversion.
-
Rolled out OneDrive folder backup to every managed device
Microsoft 365 and Intune environment
Folder backup enabled across managed devices without users having to sign in or do anything.
How it went
- Problem
- User folders were not consistently backed up to OneDrive.
- What I did
- Deployed Known Folder Move and silent account setup through the Intune Settings Catalog, staged through pilot and exclusion groups.
Certifications
-
Cisco Certified Network Associate (CCNA)
Cisco, earned
-
Fortinet NSE4 FortiOS Administrator
Fortinet, studying now: IPsec VPN, SD-WAN and FGCP high availability
Lab projects
-
Hybrid cloud to on-prem IPsec tunnel
BuildingAn IKEv2 site-to-site tunnel between a FortiGate VM in AWS and a physical FortiGate 60F at home, which sits behind NAT on a dynamic IP.
What I learned: IKEv2 over TCP grabbed port 443 and locked me out of the GUI. Setting the phase 1 transport to UDP before building any tunnel prevents it.
-
Remote access VPN with FortiClient on Linux
BuildingFortiClient on Fedora dialing into a FortiGate running in GNS3, built to practice IKE troubleshooting from the client side.
What I learned: Worked through DH group, proposal and IKEv1 versus IKEv2 mismatches to get phase 1 up with IKEv2, AES-256, SHA2-256 and DH group 14.
-
Proxmox and GNS3 network lab
RunningA Dell PowerEdge running Proxmox, with the GNS3 server in an LXC container for native KVM so FortiGate and Cisco images run at full speed.
What I learned: Matching the GNS3 client and server versions exactly saves hours of confusing errors.
-
Segmented home network
RunningA UniFi Dream Machine routing VLANs router-on-a-stick style, with a Cisco switch as the core and a FortiGate 60F for lab traffic.
What I learned: Got SSH working on an older Cisco IOS switch by enabling the legacy ciphers and key exchange it still requires.
-
Self-hosted remote support server
RunningRustDesk relay and rendezvous servers running in Docker, with key-pinned clients and unattended access.
-
Media file server move to TrueNAS
PlannedMoving a media share off a Windows file server that crashes under NFS load to a dedicated TrueNAS SCALE box, with the RAID controller crossflashed to IT mode for ZFS.
Skills
- Firewalls and VPN
- FortiGate, SD-WAN, IPsec VPN, FSSO, Firewall policy
- Switching and wireless
- FortiSwitch, FortiAP, UniFi, Cisco IOS, VLANs, Wi-Fi tuning
- Identity and endpoints
- Microsoft 365, Entra ID, Intune, SAML SSO
- Platforms
- Linux (Ubuntu, Fedora), Windows, Proxmox, Docker, AWS
- Learning now
- Python, Ansible, Netmiko