Resume

Network Security Solution Architect - BANK OF CANADA - Calgary, AB
September 2024 – November 2025

Led design and implementation of Zero Trust and hybrid-cloud security architectures for critical banking systems. Provided hands-on leadership across Cisco, and Check Point environments, with remit covering NIST 800-207, enterprise standards, and regulatory requirements.

• Built Check Point Maestro firewall fabric with elastic scaling and high availability, deploying firewall-on-a-stick architecture and integrating with Cisco APIC to enforce multi-tenant security policies and governance models across datacentre environments.

• Improved traffic isolation and segmentation, reducing lateral-movement risk and strengthening overall security posture while positioning datacentre for scalable growth and modernization.

• Authored HLDs and LLDs for security controls, service chaining, and firewall scalability. Produced migration runbooks and cutover / rollback plans and executed project plans to deliver multiple deployments according to requirements.

• Designed micro-segmentation strategies mapped to application tiers and compliance requirements, creating policy matrices and enforcement plans that tightened control boundaries.

• Coordinated with SOC and NOC teams to align logging, telemetry, and incident-response workflows across on-prem and Azure environments, supporting security transformation and operational resilience.

• Collaborated with application owners on implementing east-west isolation with minimal business disruption.

Network Solution Architect - BANK OF CANADA - Calgary, AB
May 2022 – September 2024

Led multidatacentre modernization and hybrid-cloud connectivity initiatives, including Cisco Application Centric Infrastructure (ACI), Azure connectivity, and enterprise routing and security architectures.

• Designed and delivered multidatacenter Cisco ACI multipod fabrics, enabling workload mobility, centralized policy, and segmentation.

• Architected hybrid connectivity using Cisco Cloud Services Router (CSR) in Azure with ExpressRoute and Border Gateway Protocol (BGP) peering; validated high availability (HA), routing convergence, and throughput for production workloads.

• Designed resilient internet edge with dual-ISP BGP local breakout and Multiprotocol Label Switching (MPLS) integration, optimizing SaaS access and reducing latency.

• Produced architecture governance artifacts, including standards, templates, HLDs, LLDs, and operational runbooks, enabling consistent implementation and smoother handoff to operations.

• Integrated security controls into datacenter modernization efforts, ensuring policy translation and logging alignment across on prem and Azure CSR deployments.

• Collaborated with application team on implementing east west isolation and secure service chaining for critical workloads, minimizing disruption.

Senior Connectivity Specialist - BANK OF CANADA - Ottawa, ON & Calgary, AB
July 2016 – May 2022

Delivered hands-on engineering across operations, implementation, and optimization of core network technologies. Implemented Dynamic Multipoint VPN (DMVPN) and BGP designs for secure branch connectivity, simplified WAN operations, and documented failover scenarios and recovery procedures.

• Maintained datacenter networking operations, upgrades, and troubleshooting for routing, switching, and overlay technologies, improving stability and reducing service interruptions.

• Worked with security and cloud teams on aligning network segmentation with compliance and Zero Trust principles, strengthening consistency across environments

• Supported firewall migrations, policy rationalization, and network segmentation projects; assisted in compliance readiness and audit evidence preparation, minimizing rework and accelerating audit cycles. 

Network Administrator - PINECREST-QUEENSWAY COMMUNITY HEALTH CENTRE (PQCHC)  - Ottawa, ON
May 2009 – July 2016

Managed IT systems oversight for multiservice community health center. Led development, implementation, and maintenance of secure network infrastructures, and supported digital transformation initiatives.

• Maintained LAN / WAN infrastructure and performed network administration, patching, and troubleshooting for clinical and administrative systems, improving reliability.

• Implemented network monitoring and backup strategies, enabling user access and endpoint connectivity while strengthening day-to-day operations.

• Protected clinical systems and patient data by enforcing network access controls and endpoint segmentation, ensuring compliance with healthcare data protection standards.