I build automation and tooling for monitoring, traffic shaping, and customer diagnostics. Specializing in bridging the gap between ISP infrastructure and modern software development.
A secure, cross-platform mobile application enabling authorized stakeholders to toggle cloud resources on-demand. This tool enforces a "Zero-Waste" policy by ensuring development/staging servers are only active when actually in use.
Created a unified visibility layer for ISP infrastructure, moving beyond standard SNMP to actionable, script-driven monitoring.
Sensitive data (IPs/Names) has been redacted for privacy.
Developed a proprietary system to differentiate and account for expensive Transit traffic versus cheap CDN/Peering traffic. This directly resulted in significant OPEX reduction.
Sensitive data (Usernames/IPs) has been redacted for privacy.
Designed a "Zero-Failure" backup ecosystem for multi-vendor environments (MikroTik, Juniper, Linux).
Managed core ISP infrastructure using accel-ppp for PPPoE/L2TP termination. Configured IPS, VLANs, QinQ, and MPLS. Handled firewalling (RouterOS + Linux), queuing, and wireless reachability (MikroTik + Cambium + Mimosa + Ubiquity). Built Lacache servers and Apple Content Caching to offload transit bandwidth.
Served as Tier 2/3 escalation point for critical outages using deep packet analysis. Authored standardized configuration templates for field teams to ensure security and performance.
Managed security posture of customer-facing servers (SSH hardening, firewalling). Performed low-level hardware recovery (SPI flash programming) for "bricked" devices.
Research into utilizing standard copper mediums for proprietary signal modulation, effectively "hiding" traffic from standard TCP/IP network interface cards.
Developing a "listen-less" server architecture where ports are not open to scanning, but require a pre-signed mutual agreement to become visible.