P
K
Security work shaped around real environments
Focused assessments and architecture guidance that clarify exposure, reduce policy complexity and strengthen control without ignoring operational constraints.
01
Firewall & Security Policy Assessment
Review policy structure, access, inspection, logging and lifecycle to identify unnecessary exposure, control gaps and avoidable complexity.
Policy analysis
Rule hygiene
Security profiles
02
Firewall & Policy Migration
Translate existing intent into a cleaner target architecture while preserving required access, validating dependencies and reducing migration risk.
Discovery
Policy translation
Validation
03
Network Segmentation Architecture
Design practical trust boundaries across users, applications, data centers and industrial zones, aligned with business flows and operational requirements.
Trust zones
Traffic flows
Least privilege
04
OT Security — Palo Alto Networks Device Security
Improve asset visibility and control across connected and operational environments without losing sight of availability, safety and device constraints.
Asset visibility
Device risk
OT architecture
05
Detection Engineering & Threat Assessment
Turn available telemetry into focused detections and threat-hunting hypotheses informed by assets, exposure, network behavior and likely attack paths.
Telemetry
Threat hunting
Detection logic
06
Architecture Review & Technical Advisory
Independent technical review of proposed designs, control placement and implementation choices before they become costly operational decisions.
Design review
Decision support
Roadmaps
PLATFORM EXPERTISE
Architecture first. Technology where it matters.
Deep platform expertise supports sound architecture—it never replaces it.
Network Security — Palo Alto Networks Strata
Next-generation firewall architecture, PAN-OS security policy, Panorama governance, migration and operational improvement.
OT Security — Palo Alto Networks Device Security
Industrial and IoT asset visibility, risk context, policy enforcement and secure OT segmentation.
Secure Access — Palo Alto Networks Prisma Access
Zero Trust Network Access, secure remote connectivity and consistent security policy for hybrid workforces.
Security Operations — Strata Logging Service & SIEM Integration
Centralized telemetry, log integration, detection engineering and operational visibility across enterprise and OT environments.
A clear path from observation to improvement
No universal blueprint. The work begins with evidence, develops a shared understanding of risk and operations, and turns that into prioritized, implementable decisions.
01
Discover
Assets, policy, flows, dependencies and constraints.
02
Understand
Exposure, behavior, intent and operational impact.
03
Design
Controls and boundaries aligned to real requirements.
04
Validate
Assumptions, access, telemetry and migration readiness.
05
Improve
Prioritized changes with sustainable ownership.
Experience behind the architecture
More than 15 years across enterprise networking and security, with a focus on making complex technical environments understandable, defensible and operable.
15+ years
Enterprise networking and security experience
CCIE
CCIE No. 61291
Enterprise Infrastructure
Cyber Elite 2022–2025
Palo Alto Networks LIVEcommunity
1,200+ contributions
Technical knowledge shared with the community
INSIGHTS
8 min read
Strata Logging Service to Microsoft Sentinel: the DCR migration
Forwarding Strata Logging Service logs to Microsoft Sentinel over the Log Ingestion API, step by step — data collection endpoint, DCR schema, service principal, and the 204-but-empty-table trap.
Palo Alto Networks · Microsoft Sentinel · Log Forwarding · Detection Engineering
10 min read
Why Automated Commit Recovery Might Not Save Your Firewall Change
Automated Commit Recovery reverted nothing during a widespread Panorama-induced outage — because the connectivity check reported success against a policy that was already blocking all traffic. What the logs showed, why it happened, and the one pre-rule that would have prevented it.
Panorama · PAN-OS · Palo Alto Networks · Incident Analysis · Firewall Operations