Campus, wide-area and data center design; routing protocol selection and behavior; switching architecture; and the operational practice of running production networks other people’s work depends on.
The estate at the City of Jacksonville ran to 220-plus locations, two data centers, 6,500 endpoints, 6,000 telephones and 1,100-plus network devices across agencies that each governed their own IT. Before that, five years at a regional integrator covering enterprise, government, healthcare, industrial, utility, cable and hospitality clients — where the work ran from climbing the tower and terminating the feed line through to systems architecture.
CCIE #10042, earned in August 2002 and maintained for twenty years.
Subtopics
- Cellular and Carrier ConnectivityCarrier-borne connectivity for sites with no wireline option — coverage measured at the site rather than read off a carrier's map, and a gateway and antenna chosen to what was measured.
- Content DistributionEdge caching to defeat latency on long, constrained links — moving the data closer to whoever is asking for it rather than buying more bandwidth.
- Data Center ArchitectureData center network design, consolidation and live migration — including moving one data center into another with the estate running throughout.
- Legacy TransportATM, Frame Relay, Token Ring and multilink serial — the transport generation the career started on, retained here because the record should show what the work actually was.
- Load Balancing & Application DeliveryF5 LTM and GTM, content switching and SSL acceleration, from early e-commerce builds onward.
- Network SegmentationSeparating traffic that must not mix — done for regulatory reasons years before the industry settled on micro-segmentation and zero trust as words for it.
- Quality of ServiceEngineering head-end bandwidth explicitly rather than buying more of it — weighted random early detection, class-based weighted fair queuing and policing.
- Research & Education NetworksFlorida LambdaRail connectivity for a five-agency regional consortium — a governance problem wearing a network's clothes.
- Routing ProtocolsBGP, OSPF, EIGRP and HSRP in production — including metric and delay-based path control across links of deliberately unequal capacity.
- VoIP & Enterprise TelephonyVoice as a designed service — including survivable local call processing so a building keeps dial tone when the path to the central platform fails.
- WAN ArchitectureWide-area transport, carrier strategy and circuit design — from bonded serial links to intercontinental telemetry and diverse carrier entry.
Applied in
- Enterprise Agreement Pursuit — Global AutomotiveCisco services subject-matter expert on a bid for a global automotive manufacturer's North American arm — a two-day clarification window, an affiliate's engineering bench as the differentiator, a loss, and a headquarters meeting four weeks later.
- Enterprise Architecture Practice BuildAn architecture practice of up to fourteen, built and run to a design review gate and a weekly rhythm — so engagements were delivered against one design language rather than individual preference.
- Casino Surveillance Network Design and SegmentationSurveillance refresh and segmentation for a metropolitan casino property — designed as Principal Architect and governed as Director, through a phased implementation and a mid-program re-scope.
- Client Architecture Portfolio88 numbered engagements across two years, twenty-plus live at any moment, across healthcare, manufacturing, financial services and the public sector — the inverse of nineteen years inside one estate, and a different problem.
- E-Rate Funded Network ProgramsRoughly fifteen engagements across school districts, a regional education service agency and a public library consortium — every design constrained by federal funding eligibility and the funding-year window.
- Multi-Property Gaming GroupFour properties for a regional casino group — security and segmentation, core refresh, wireless, surveillance separation and firewall consolidation.
- Healthcare EstatesFive providers — firewall and intrusion-prevention upgrades against an active vendor advisory, a multi-site data center fabric on standing retainer, and segmentation with virtual desktop.
- Diversified Industrial ManufacturerBusiness-unit and data center assessments, automated discovery and network assurance, an enterprise architecture review, and integration across two acquisitions.
- Network Orchestration Proof of ConceptItential and Gluware assessed against traditional automation for the group's parent company — built out on virtualized topologies rather than judged on datasheets, under a signed statement of work, closing with a master services agreement.
- Vendor and Partner ProgramSeven technology and service partners brought in across two years for capability the practice did not have or could not scale, with a formal manufacturer specialization track behind it.
- Enterprise Networking Practice LabThree repurposed servers being rebuilt into a 2.3 TB virtualized network emulation cluster, funded on a cost-per-month argument against a six-month procurement lead time — and the end of a practice running on engineers' own hardware.
- SD-WAN Portfolio — Banking and State LegislatureThree concurrent SD-WAN engagements in regulated and public environments, with the low-level design at revision 2.0 and every configuration passing a routing review before production.
- State and Local Government DeliveryA state transportation department data center relocation inside a single summer window, and county switching, firewall and platform replacement alongside it.
- Utility OT/IT EngagementA natural gas and electric utility, carried from review of the SCADA statement of work through firewall and switch delivery.
- Firewall Refresh and Intrusion ResponseA multi-site next-generation firewall refresh for a nonprofit health provider — and an intrusion the night after cutover, met with geo-fencing and containment run alongside day-one support.
- Municipal Infrastructure Assessment to RFPAn infrastructure assessment for a town government, scoped from the start to become the foundation of its own procurement rather than a proposal for follow-on work.
- Enterprise Core NetworkThe city's core network across nineteen years — architecture, standards and, when it mattered, hands on the equipment.
- Citywide Network Total Cost of Ownership StudyA weighted scoring instrument for a manufacturer standard ahead of a refresh — which earned itself within three weeks, when a reseller's savings claim turned out to be priced against the wrong baseline.
- Infrastructure and Integration AutomationRecurring infrastructure and integration work automated on orchestration platforms, governed on the principle that automation multiplies the blast radius of a mistake.
- Main Data Center Physical Connection LayoutThe as-built record of every port, patch and strand in the main data center — a naming convention where the identifier is the location, carried to revision 21 over fifteen years.
- Fourteen Weeks on the ToolsThe densest hands-on stretch of the NRI tenure — seven client engagements worked personally, in the configuration and the peer reviews and the customer calls, while taking over a team from the second day.
- Enterprise Audiovisual-over-IP FabricFive sites on one fabric across eighteen years — Council, the Emergency Operations Center, the Ed Ball backup rooms, the Cecil Field backup 911 facility and a youth services agency — so a room stopped being a closed system.
- Port-Level Authentication: The 2006 PositionAn argument made in 2006 that securing ports by MAC address was not the answer — held across four platform generations, and in production fifteen years later by a route other than the one proposed.
- Jacksonville Public Library NetworkEighteen years and two full redesigns of a central library and its branches, from the Main Library's opening to the carrier handoff.
- Administrative Identity for the Network EstateSixteen years and three platform generations of who may type a command on a city switch and what is recorded when they do — begun as a procurement condition in 2006, closed with multi-factor and a duty-separated account standard.
- Enterprise Network Access ControlSeven years from vendor evaluation to a control that could quarantine a port anywhere in the city — and the federated exception handling that made enforcement survivable in a building shared with four other agencies.
- Enterprise Traffic Management PlatformSixteen years on a platform chosen for what it could be programmed to do rather than what it did on the day — bought as a server proxy in 2006 and ending as continuity infrastructure.
- Enterprise Packet Capture and Network Forensics PlatformFull packet capture on eight critical-path points, owned across thirteen years and two platform generations, with retention pushed past thirty days.
- Republican National Convention — National Special Security EventCritical Infrastructure Subcommittee for a national special security event relocated to the city eight weeks into planning — first-responder mobility, venue design, carrier redundancy, and federal sensors landed on a municipal estate.
- Internet Perimeter Firewall ReplacementAn unsupported, undocumented Check Point estate replaced with firewall blades in the core — held as a stated performance objective, carried from written justification to floor-by-floor cutover, with no vendor producing a design at any point.
- Hospital Network and Clinical WirelessFacility-wide clinical wireless under HIPAA across hospital systems in New York, Florida, Delaware and North Carolina.
- JEA Power Quality Metering NetworkVoltage sags, swells and harmonics measured at ten substations — one template design, an addressing plan built for it, and fiber off the ground grid, before the data was aggregated into the PIE SCADA platform.
- E-Commerce Site ArchitecturePIX firewalls, content switches and SSL accelerators for early commercial web estates.
- Florida Rock Facilities Technology AssessmentEstate-wide survey establishing what could be connected, what it would cost, and what had to be built first.
- National Insurance Carrier Enterprise WANFive sites joined over an AT&T frame relay cloud at committed rates from 32K to 320K — an era when the design had to decide what mattered, because not everything could.
Through subtopics
47 further projects reference a subtopic of this entry rather than the entry itself.
- Career Reference Record — Design, Build and Publishing PlatformA cross-linked reference work built as a derived graph: edges declared once, every index, backlink and chart generated from them, published static with per-document access control.
- New River and Kanawha Falls Site Assessment and Carrier Coverage AnalysisSite assessment and carrier coverage analysis for treatment and pumping facilities on the New River and at Kanawha Falls, paired with the communications design each site needed.
- Data Center Estate and Colocation ProgramSix tiered sites for the city and five external agencies — and a municipal IT department selling colocation against commercial carriers, and winning on engineering.
- Consolidated CAD/911 Dispatch SystemTwo agencies with separate commands onto one dispatch platform, cutting response times from five to ten minutes down to one to two.
- Security Posture, Incidents and Federal LiaisonWorking directly with the City's Chief Security Officer on posture, governance, attacks and breaches — and alongside Homeland Security and the FBI when an incident reached that far.
- Enterprise Multi-Tenant Firewall ArchitectureSix independently governed agencies on shared infrastructure, none able to reach, disrupt or inherit the regulatory exposure of any other.
- The Utility Relationship: Twenty-Five Years, Two EmployersSubject-matter expert to the same municipal utility from October 1999 to January 2024 — first as its consultant, then as the City's counterpart to it, because JEA is an authority under the city charter.
- City Council Chamber AV and IT ArchitectureAudio, video, voting and broadcast systems for a chamber where proceedings are a public record — owned for twenty-one years.
- Ed Ball Hearing Room — Backup Council ChambersA committee room specified to run a City Council meeting if the Chamber were unavailable — which makes it a continuity facility for the legislative body, not a meeting room.
- Jacksonville Intelligent Transportation SystemCommunications and network infrastructure across more than one thousand signalized intersections for a consolidated city-county.
- Fire & Rescue Mobile Gateway and SD-WAN OverlayThree hundred apparatus turned into routed nodes on the enterprise network — dual carriers on private APNs, head-ends behind two providers, and a zero-trust overlay behind a firewall virtual system built for the fleet.
- ISP Cutover, Public IP Renumbering and WAN ModernizationAn estate moved to a new provider and a new public address space, then modernized for remote and hosted working without dropping the applications the business ran on.
- PLC Alarm Notification over Cellular AssessmentHow a controller raises an alarm that reaches a human when the site has no operator in front of it and no network worth the name.
- Union Rome Water Treatment Plant Inspection and System DesignDrone-assisted survey, thermal imaging and coverage assessment across 32 sites along the Ohio River, ending in a design package specified down to the part.
- Cecil Disaster Recovery Data CenterFacility and network design for the recovery site — power, cooling and carrier entry as well as what ran inside.
- Citrix Published Application EstateEighteen years, five platform generations and roughly 4,000 billed seats — with a per-seat price an agency could argue with.
- Clerk of the Court Filtering and DMZ ArchitectureA separate filtering estate and demilitarized zone for an independently governed constitutional officer sharing City facilities.
- Enterprise Web Filtering and Content SecurityEighteen years and five vendor generations, split two ways between a government workplace and a public library on the same infrastructure.
- JTA and Downtown Transit ConnectivitySeventeen years on the boundary between two public agencies that could not direct one another — first as the city's architecture review on transit proposals, then as owner of the interconnect itself.
- Oracle ERP Program — RFP to Cloud Go-LiveTwelve years from the 2011 request for proposal to a 2020 cloud go-live — the cost model that had to exist first, and a cutover instrumented so neither side could blame the other.
- NFL Stadium Cybersecurity ReviewA league Internal Audit assessment of the city-owned stadium against the Department of Homeland Security's stadium cybersecurity guidelines, reaching the building's control systems as much as its enterprise IT.
- Library Wireless ProgramFrom reported dead spots to an engineered coverage program, on an estate where the wireless carried staff safety devices.
- Fayette County RF Propagation and Municipal Backhaul EvaluationPropagation and tower analysis for a West Virginia county, with backhaul evaluation for the municipal infrastructure that had to report over it.
- E911 Caller Location and Backup Answering PointMaking the dispatcher see a room instead of a phone number — then building a second answering point so the dispatch center was not a single point of failure.
- Juniper Enterprise Security SuiteA security platform rather than a firewall — selected on an instrument written before anyone knew who would win, operated for twelve years, and retired in stages on a plan the same team wrote.
- Florida LambdaRail Regional ConsortiumFive independently governed public bodies onto the state research and education network, over fiber paths that could be proven separate.
- Public Access Wireless ProgramFourteen years and four program names — JaxWiz, municipal Wi-Fi, public wireless, Downtown Wi-Fi — from inheriting somebody else's pilot to a signed, mapped downtown build still being extended four years later.
- Parking Meter InfrastructureCommunications and back-end connectivity for street-level metering, with the traffic enforcement division.
- Annex to Main Data Center ConsolidationMoving one data center into another with the estate live throughout, on three design documents at revisions ten, twelve and ten.
- Enterprise Firewall Policy and OperationsEight years running the rule base directly across two platform generations — every rule, change and upgrade — then handing it down to a dedicated post rather than holding it.
- Ed Austin State Attorney's OfficeNetwork infrastructure, VoIP telephony and building automation for the State Attorney's building.
- Automatic Vehicle Location ProgramA transit and traffic system that became a public works and code enforcement fleet estate — 167 units across thirteen divisions, owned from the transport underneath it to the strategy on top.
- One Spark Festival WirelessForty-two access points in downtown traffic signal cabinets, backhauled over the fiber that runs the lights, with Ubiquiti mesh between intersections as the fallback and a tenfold internet burst for the week.
- Telemedicine Program with Hospital PartnersDuval County Jail to UF Health — fifteen months from vendor presentation to completed pilot, opened with a business case rather than with equipment.
- Duval County Courthouse Technology ProgramA $12M IT program inside a $350M, 800,000 square foot capital facility, cut over live to a fixed date.
- Biochemical Manufacturer Converged NetworkHeadquarters, an affiliated business and a plant site joined over encrypted tunnels on consumer DSL — where the reliability had to come from the design, because it was not coming from the circuits.
- Cisco DOCSIS Residential Cable BuildoutsGreenfield residential cable plant, headend policy, address management and voice — and one public address pool carrying thousands of residents.
- Super Bowl XXXIX Surveillance Network and Command CenterThe transport and command center behind the video surveillance estate for the 2005 Super Bowl — evaluated, architected and overseen by the same person, deliberately.
- JSOC Content Distribution CapabilityCisco Content Engines placing data locally at each site to cut lag between the United States and locations outside it.
- GE International Power Generation Monitoring NetworkReal-time plant telemetry from generating facilities in China and Australia back to a monitoring center in Florida.
- JEA Utility SCADA and Redundant Control SitesSCADA across 24 treatment plant sites on a SONET and ATM core — water and wastewater engineered as separate systems, with the control network separated from the corporate one two decades before the industry had a name for it.
- Georgia-Pacific IT/OT ConvergenceProcess control and SCADA alongside HVAC, access control and video on the enterprise network — before the industry had words for it.
- SOCOM Transportable Wireless KitA two-site voice, video and data package over a point-to-point link where no fixed infrastructure existed.
- Duval County Substation NetworkEvery electrical substation in the county connected for centralized management and monitoring.
- Insurance Carrier E-Commerce PlatformMainframe to public web in 2001, across a colocation tunnel and two firewalls — where the deliverable was the boundary, not the website, and the documentation reached revision 243.
- Water Treatment Facilities WAN/LANWAN and LAN design for water treatment facilities, with PIX firewall and web monitoring.
- StorComm Teleradiology PlatformDiagnostic imaging delivered to radiologists at home over ISDN and dial-up — telemedicine fifteen years before the market used the word.
Career
- Director of Services · Principal Architect · NRI North America (formerly Core BTS)
- Founder and Principal · MYT, Michael Young Technologies
- Senior Network Engineer · Coleman Technologies (subsequently acquired; now Presidio)
Attested by
- CCNACisco Certified Network Associate — the first step onto the track that led to the CCIE two years later.
- CCNPCisco Certified Network Professional, on the way to the lab.
- CCIE #10042Cisco Certified Internetwork Expert, earned August 4, 2002, maintained for twenty years and carried to Lifetime Emeritus in August 2022.
- Cisco Expert-Track Written ExaminationsFour expert-track written examinations passed across eight years. These carried CCIE recertification through successive cycles — the exam record behind twenty years of maintaining #10042.
- Cisco Specialist ExaminationsFive specialist and technical examinations passed in 2003, mapping directly onto the cable plant, quality of service and voice work of that period.
- CCDE WrittenScheduled for October 2026 as the qualifying exam to return CCIE #10042 to active status.