IT‑IS‑Networking
Technology › Security Architecture

Juniper Networks

The city's security estate for a period, and a deliberate second vendor track twelve years into holding a CCIE.

Also known as JunOS, SRX

Left to right is time. Each row is one of the 6 disciplines this one worked alongside, ordered so kindred disciplines sit next to each other rather than alphabetically — a landscape only means anything if neighboring rows belong together. Height is the work running in that domain in that year, weighted by what failure would have cost — life-safety ×3, a statutory obligation ×2.2, the estate itself ×1.5, an evaluation ×1. Every project declares which of those it was, so each ridge traces to an entry you can open and disagree with. Only the work that used this technology is counted, so what shows here is the company it kept rather than the record around it. Height and color are on the record-wide scale rather than this page’s own, so a modest estate draws a modest landscape and any two of these pages can be read against each other.

Design, configuration and maintenance of the Juniper security system at the City of Jacksonville — firewall rules, changes and upgrades — alongside Cisco ASA platforms serving the library system and the Clerk of Court data center. Certified across the Juniper security track in 2012.

This was hands-on operation rather than oversight — every rule, change and upgrade — and the JNCIP-SEC was earned while the platform was live rather than in advance of it.

Multi-vendor estates are the normal case in government. A design language that only works on one vendor’s equipment is not an architecture.

Applied in

  • Enterprise Architecture Practice Build2024–2026An architecture practice of up to fourteen, built and run to a design review gate and a weekly rhythm — so engagements were delivered against one design language rather than individual preference.
  • Vendor and Partner Program2024–2026Seven technology and service partners brought in across two years for capability the practice did not have or could not scale, with a formal manufacturer specialization track behind it.
  • Juniper Enterprise Security Suite2009 – 2021A security platform rather than a firewall — selected on an instrument written before anyone knew who would win, operated for twelve years, and retired in stages on a plan the same team wrote.
  • Enterprise Firewall Policy and OperationsMay 2009 – March 2017Eight years running the rule base directly across two platform generations — every rule, change and upgrade — then handing it down to a dedicated post rather than holding it.

Career

Attested by

  • JNCIA2012 · LapsedJuniper Networks Certified Associate, taken in January 2012 as the City of Jacksonville estate took on Juniper security platforms.
  • JNCIS-SEC2012 · LapsedJuniper Networks Certified Specialist, Security.
  • JNCIP-SEC2012 · LapsedJuniper Networks Certified Professional, Security — the professional tier of the Juniper security track.