Network Engineer · Cloud Architect
CCNP and AWS SAA certified IT professional specializing in hybrid cloud connectivity for healthcare environments. BGP route policy, IPSec tunnels, and Terraform-provisioned infrastructure across AWS and Azure.
I design and operate hybrid cloud infrastructure at the layer where enterprise networking meets AWS. That means BGP route policy, IPSec tunnels, VPC architecture, and the segmentation decisions that determine whether on-premises systems can reach cloud resources safely.
For the past several years I have been doing this work in healthcare environments where the connectivity I maintain is part of clinical infrastructure. My CCNP background gives me a foundation in routing and switching that shapes how I approach cloud networking problems, and my AWS Solutions Architect certification formalizes the cloud side of that same work.
Everything below runs on real AWS infrastructure, provisioned entirely with Terraform. The flagship is Packetfall, a production SaaS serving users right now. The labs are deliberately torn down between demos, because idle infrastructure is wasted money, and each one redeploys from state in minutes.
One production SaaS and six reproducible labs. Every AWS resource provisioned with Terraform.
A production SaaS that teaches the CCNA and Network+ as a full 3D RPG in the browser. Two complete certification tracks, 53 dungeons, CLI lab boss fights, and a ranked PvP arena, with subscriptions handled through Stripe.
Serverless end to end: S3 and CloudFront at the edge, Cognito authentication, Stripe billing, DynamoDB, and Lambda microservices behind HTTP and WebSocket APIs. Every resource is Terraform-managed and ships through a GitOps pipeline with no long-lived AWS keys.
100% serverless · IaC end to end · ~$10/mo
Two FRR routers peered over an IPSec tunnel in AWS. This is the exact protocol stack behind AWS Direct Connect: eBGP over encrypted transport, route advertisements flowing between autonomous systems. The terminal shows a captured snapshot from a real session that stayed established for over five weeks.
Spun down to keep cloud cost at zero between demos. The full stack (VPCs, EC2, FRR, IPSec, IAM, Lambda) redeploys from Terraform in a few minutes.
AS 65001 ←── eBGP / TCP 179 / IPSec ──→ AS 65002
IKEv2 IPSec tunnel between two AWS VPCs using strongSwan, simulating a production hybrid environment. Encrypted connectivity established, routes propagating across the tunnel, and end-to-end reachability verified between the networks.
View on GitHub →Hub-and-spoke topology across three VPCs: Shared Services at the center, Prod and Dev as isolated spokes. Each spoke reaches shared resources. They cannot reach each other. This is the standard segmentation pattern for enterprise-scale AWS environments.
View on GitHub →Production-grade fault tolerance: ALB distributing traffic across an Auto Scaling Group in two Availability Zones, with Multi-AZ RDS in private subnets. Failover tested by terminating instances and verifying automatic recovery.
View on GitHub →A parameterized Terraform module that provisions a complete VPC from a single definition. Instantiated with different inputs for prod and dev, eliminating configuration drift between environments. This is the pattern used in production IaC at scale.
View on GitHub →VPC Flow Logs piped to CloudWatch with custom Logs Insights queries for detecting rejected connections, unusual traffic patterns, and lateral movement. Rejection alarms and a live dashboard built for real incident investigation, not just log storage.
View on GitHub →Writing on cloud networking, infrastructure, and the work behind the portfolio.
Packetfall is a 3D RPG that teaches the CCNA and Network+ in the browser. The game is the product. The architecture is the story: fully serverless, Terraform end to end, operated by one person.
Read article →From a Cardano stake pool on Linode to hybrid cloud infrastructure at scale. The journey from enterprise networking to cloud, and why 2026 is the right time to go deeper.
Read article →Most engineers have read about BGP. I wanted to show it. What building a queryable live routing lab in AWS taught me about the gap between certifications and production networking.
Read article →Have a question or want to connect? Let's talk.