Embedded Files
Open to senior architecture roles and consulting engagements.
I design and deliver enterprise-grade security and network architecture for organizations that cannot afford failure. With 15+ years in critical infrastructure — including multi-year engagements at the Bank of Canada — I bring the rare combination of Zero Trust design, datacenter modernization, and Azure hybrid cloud expertise that senior environments demand.
Architected a Check Point Maestro firewall fabric for Canada's central bank — designing elastic scaling, APIC integration, and multi-tenant policy enforcement for one of the country's most sensitive network environments.
Bank of Canada — Network Security Solution Architect (2024–2025)
Led the design and delivery of Cisco ACI multipod fabrics across multiple datacenters, enabling workload mobility and centralized policy at scale — a project that required precision, coordination, and architectural depth few practitioners possess.
Bank of Canada — Network Solution Architect (2022–2024)
Designed Zero Trust micro-segmentation aligned to NIST 800-207 across critical financial infrastructure — translating a complex compliance framework into a technically sound, operationally deployable architecture.
Bank of Canada — Zero Trust Program (2024–2025)
What I DO?
Architecture & Design
I translate complex business and security requirements into documented, deployable network architectures. From High-Level Design through Low-Level Design, migration runbooks, and cutover plans, I produce the governance artifacts that turn architectural intent into operational reality.
Hallmark skills: HLD/LLD authorship, TOGAF-informed governance, Cisco ACI, datacenter modernization, multi-vendor environments.
Security & Compliance
I design security architectures that are rigorous without being brittle. My work spans Zero Trust frameworks, micro-segmentation, firewall fabric engineering, and compliance-readiness — with hands-on experience in financial sector regulatory environments where the cost of error is institutional, not just technical.
Hallmark skills: Zero Trust / NIST 800-207, Check Point Maestro, Cisco Secure Workload, SASE, SOC/NOC integration.
Cloud & Hybrid Connectivity
I design and implement hybrid cloud connectivity that keeps production workloads running reliably across on-premises and Azure environments. My Azure Architect Expert credential is backed by real delivery: ExpressRoute, CSR-based routing, BGP, and dual-ISP edge architectures built for high-availability enterprise use.
Hallmark skills: Azure Networking, ExpressRoute, CSR, BGP/OSPF, MPLS, SD-WAN, SASE.
Project Work
Firewall Fabric at Central-Bank Scale
Designed and delivered a Check Point Maestro firewall fabric for the Bank of Canada — incorporating elastic scaling, APIC policy integration, and multi-tenant segmentation across a production banking environment. Paired with authored migration runbooks and rollback plans, this architecture was built to be both secure and operable on day one.
Sector: Financial Services / Critical Infrastructure
Multi-Datacenter Modernization with Cisco ACI
Led the architecture and delivery of Cisco ACI multipod fabrics spanning multiple Bank of Canada datacenters. The outcome: workload mobility, centralized policy management, and a scalable SDN foundation that replaced aging, manually-administered infrastructure — with full governance documentation at every stage.
Sector: Financial Services / Government
Zero Trust Micro-Segmentation — NIST 800-207
Designed a Zero Trust micro-segmentation architecture mapped to NIST 800-207 across critical financial infrastructure. The work required translating a rigorous compliance framework into a precise, deployable technical design — including policy authoring, telemetry integration, and incident-response workflow alignment with the Bank's SOC and NOC.
Sector: Financial Services / Regulatory Compliance
Azure Hybrid Connectivity Architecture
Architected hybrid connectivity using ExpressRoute, CSR routing, BGP, and dual‑ISP edge designs — ensuring resilient, high‑availability connectivity between on‑premises datacenters and Azure production workloads.
Sector: Cloud / Enterprise Hybrid
Enterprise Voice Modernization
Delivered enterprise voice modernization including CUCM upgrades, SIP migrations, PRI retirement, and carrier integration. Enabled secure, scalable unified communications aligned with modern collaboration platforms.
Sector: Enterprise Communications
Architecture Governance & HLD/LLD Delivery
Produced enterprise-grade High-Level Designs, Low-Level Designs, migration runbooks, and governance artifacts across multi-vendor environments — ensuring architectural intent translated into operational reality.
Sector: Architecture / Governance
Hiring for a Senior Architecture Role?
I'm open to senior architect and principal-level opportunities in security, network, and cloud infrastructure — particularly in regulated industries, financial services, and critical infrastructure environments. I bring proven delivery at enterprise scale, full governance documentation, and the credibility of sustained engagement at the Bank of Canada.
Need an Architecture Engagement?
Whether you need a Zero Trust assessment, a datacenter modernization roadmap, or an independent review of your hybrid cloud architecture, I work with enterprise and mid-market organizations as a fractional or project-based architect. I deliver fast, I document thoroughly, and I hand off something your team can actually operate.
Page updated
Report abuse