Engineering case studies
Systems built in production environments. No employer names — scale and constraints only.
Stevens Knowledge Hub
Protocol education and analysis platform in the W. Richard Stevens tradition: annotated PCAP decode, guided reading, learning paths, protocol playground, multiplayer analysis sessions, legacy hall.
↳ The book I learned from, rebuilt as software.
PAN-OS fleet automation platform
Pre/post upgrade behavioral validation, CVE exposure mapping, config drift detection and real-time upgrade telemetry across a large firewall fleet.
↳ Upgrade risk made measurable before the change window opens.
PingVault
Network intelligence and BGP cascade forensics platform — reconstructing propagation, blast radius and timing after a routing event.
↳ Answering what actually happened, once the event is over.
Multi-tenant Strata Cloud Manager + Azure cross-tenant Cloud NGFW hub
Cross-tenant Cloud NGFW hub design and tenancy model for a large healthcare enterprise.
↳ Tenancy boundaries that survive an org chart.
GlobalProtect M&A reference architecture
Remote-access pattern for absorbing acquired networks without collapsing address space or trust.
↳ A repeatable integration path instead of a bespoke one per acquisition.
Expedition
Early adopter of Palo Alto Networks' firewall migration tool, and a member of the customer group that helped frame key requirements during its early development. Historical.
↳ Where the validate-both-ends migration methodology came from.