Independent Security Infrastructure Consulting

Enterprise defenses, architected by the engineer who builds and runs them.

20+ years designing firewall architectures, cloud security platforms, and automation pipelines for banks, healthcare, and Fortune 500 networks — now available for direct engagement.

Open to staff augmentation, project-based, and advisory engagements
20+
YEARS IN SECURITY ENG.
500+
EDGE DEVICES AUTOMATED
CISSP
/ CCSP CERTIFIED
JCA SEC. ARCH. FW FIREWALL CLD CLOUD SEG MICROSEG. ID IDENTITY OPS AUTOMATION
// live topology — every engagement routes through the core
What I build

Five practice areas, one architect

Each engagement maps to a node on the topology above — pulled straight from production work at Palo Alto Networks, Medtronic, and Huntington National Bank.

NODE — FW

Firewall & Network Security Architecture

Design and hands-on deployment of Cisco Firepower, Palo Alto NGFW, Check Point, and Fortinet. Zero-downtime migrations off legacy platforms.

NODE — CLD

Cloud Security Engineering

AWS and Azure security architecture, Prisma Cloud and Aqua runtime protection, Secure SASE rollouts (Zscaler, Umbrella SIG, Prisma Access).

NODE — ID

Identity & Network Infrastructure

Cisco ISE and Aruba ClearPass deployments, BGP/VRF routing, enterprise switching, and F5 traffic management.

NODE — SEG

Workload Microsegmentation

Illumio-based segmentation for containerized workloads on Red Hat OpenShift and legacy bare metal, tuned for financial and healthcare compliance.

NODE — OPS

DevSecOps & Automation

Ansible and Terraform pipelines, HashiCorp Vault, and CI/CD tooling. Past engagements cut firewall patch cycles by 50% across 500+ devices.

NODE — ADV

Architecture Review & Advisory

Independent second opinions on existing security architecture, technical due diligence, and SOW-ready scoping for larger initiatives.

The toolset

Platforms, vendors & languages

Broad, hands-on coverage across the full security stack — from edge firewalls to CI/CD pipelines.

Security & Firewall Architecture

Cisco Firepower (FTD/FMC) Palo Alto NGFW Check Point Fortinet AWS WAF Nginx WAF Illumio (Microsegmentation) Algosec Firemon Tufin McAfee Sidewinder

Cloud Infrastructure & Security

Amazon Web Services (AWS) Microsoft Azure Prisma Cloud Prisma Access Aqua Security Zscaler Cisco Umbrella SIG Secure SASE

Identity & Network Infrastructure

Cisco ISE Aruba ClearPass BGP / VRF Routing Enterprise Switching F5 Local Traffic Manager F5 Global Traffic Manager VMware ESXi

Automation, DevSecOps & OS

Ansible Terraform HashiCorp Vault Python Bash PowerShell Docker Kubernetes Red Hat OpenShift Red Hat Linux Windows Server Jenkins Git
Track record

Where this experience was built

Sixteen years of enterprise, financial, and healthcare security work, in order.

Senior Consultant, Enterprise Security

Architected multi-node Cisco FTD/FMC deployments in Azure and directed a zero-downtime migration from Check Point to Palo Alto Networks for enterprise clients.

Container Security & Automation Specialist

Led the migration from Aqua to Prisma Cloud, engineered Illumio microsegmentation for OpenShift workloads, and built Ansible automation that cut patch cycles by 50% across 500+ edge devices.

Cloud Security Pre-Sales Engineer

Advised on multi-cloud security transformations and built automated Terraform-based POC frameworks spanning AWS, Azure, and GCP.

Senior Network Security Analyst

Directed global Cisco Firepower and Check Point policy engineering, and ran validation POCs with Algosec, Firemon, and Tufin for compliance tracking.

Senior Network Security Support Engineer

Tier-3 global escalation engineering for Sidewinder firewalls, DLP arrays, and IPS/IDS platforms; built and maintained the department's staging labs.

Credentials

Certifications

Kept current across cloud, network, and systems security.

2026
CCSP — Certified Cloud Security Professional
2023
CISSP — Certified Information Systems Security Professional
2022
AWS Certified Cloud Practitioner
2018
Cisco CCNA (Routing & Switching)
2017
CompTIA Security+
2017
Red Hat Certified System Administrator (RHCSA)
2011
Microsoft Certified Systems Engineer (MCSE)
2005
CompTIA Network+ & A+

Have a network that needs to hold?

Available for direct engagements, staff augmentation, architecture reviews, and advisory work — remote or on site, Rosemount, MN and beyond.

Based in Rosemount, MN