00
Professional summary
Senior network and security engineer with 9+ years designing, deploying, and securing global enterprise and hybrid-cloud infrastructure. Core strengths span resilient network architecture, routing and switching, and SD-WAN alongside firewall engineering, Zero Trust, and IAM integration — backed by a track record of translating business needs into scalable solutions and aligning security with how the organization operates.
01
Professional experience
Senior Network Engineer
Verathon · Bothell, WA
Sep 2021 – Present
- Act as subject-matter expert and technical interface across engineering, security, and operations teams, owning the infrastructure lifecycle from packet-level troubleshooting to permanent architectural fixes and authoring the design standards, site templates, and runbooks that keep deployments repeatable across sites.
- Network design & deployment: Build out multi-site infrastructure end to end — server rooms, data closets, UPS, fiber patch panels, handoff and core/access switching, firewalls, enterprise wireless — and own its day-to-day maintenance and documentation.
- Hybrid SD-WAN & WAN: Architected resilient dual-hub-and-spoke and SD-WAN topologies interconnecting physical sites with Azure, aggregating all ISP links with advanced traffic shaping and QoS to deliver secure, reliable connectivity to remote facilities.
- Firewall & edge platforms: Hands-on ownership of Fortinet (FortiGate/FortiOS), Cisco ASA/Firepower, and security policy architecture — NAT, IPS deep packet inspection, TLS inspection, and platform lifecycle including FortiGate virtual firewalls in Azure.
- Zero Trust & identity: Led the move from legacy VPN to Zero Trust, migrating 800+ users to Cloudflare ZTNA with microsegmentation, device posture, RBI, DNS filtering, and least-privilege RBAC. Integrated access with enterprise IAM (RADIUS + Duo MFA, 802.1X, certificate-based Wi-Fi, PKI, SAML/SSO).
- Detection & response: Stood up SIEM and SOAR for centralized event management and automation across CrowdStrike, Arctic Wolf, Graylog, and VirusTotal — cutting manual effort with efficient alerting.
- AI security: Drove an AI security initiative with guardrails against shadow AI, using CASB, RBI, and DLP policies to keep business data out of unsanctioned tools.
- Application security: Built a secure app-development pipeline integrating Claude with GitHub and Cloudflare Workers for streamlined deployment — ensuring API keys and secrets are always encrypted, with automated code security validation at build time.
Regional Network Engineer
WPP · Seattle, WA
Nov 2018 – Sep 2021
- Data center security infrastructure: Led a comprehensive security-focused data center upgrade, implementing redundant fiber paths, enhanced physical security controls, and hardened switch configurations across all IDFs to protect critical infrastructure assets.
- Network security operations: Managed daily security operations across five North American offices, monitoring for security incidents, ensuring high availability of security controls, and maintaining a consistent security posture across all locations.
Senior Engineer, Azure
Microsoft (via vendor) · Redmond, WA
Jan 2018 – Nov 2018
- Cloud infrastructure expansion: Managed large-scale global Azure cloud buildout projects, overseeing compute resource expansion across multiple data centers to support enterprise-level workloads.
- Systems integration: Collaborated with Azure engineering teams to resolve high-priority deployment blockers, ensuring infrastructure met Microsoft's stringent security, quality, and SLA requirements.
System Administrator
Altius Institute for Biomedical · Seattle, WA
Sep 2014 – Dec 2017
- Operations support: Managed first-line IT operations and performance monitoring, implementing standardized documentation and a centralized knowledge base to improve team resolution efficiency.
02
Technical skills
Network
Security technologies
Security disciplines
03
Education
| Degree | Institution | Dates |
|---|---|---|
| M.S. — Health Information Management | University of Washington · Seattle, WA | Sep 2017 – Mar 2019 |
| B.S. — Informatics | University of Washington · Seattle, WA | Sep 2014 – Jun 2016 |
04
Certifications
| Certification | Issuer | Valid through / earned |
|---|---|---|
| CISSP | ISC2 | Jan 2029 |
| Security+ | CompTIA | Apr 2029 |
| Network Security Professional (NSE4) | Fortinet | Feb 2023 |
| CCNP Routing & Switching | Cisco | Feb 2022 |
| Solutions Architect – Associate | AWS | Jun 2023 |