Freelance Network Engineer

Network

Networks that evolve with your organization

I design, migrate, and optimize network infrastructures — from setting up business networks, to migrating systems to future-ready architectures, to improving existing networks for better clarity, scalability, and manageability.

For instance, as the Lead Network Engineer of an extensive migration project, I was responsible for successfully transitioning a monitoring platform from its legacy networks to a modernized network environment. The platform, used to monitor the performance and capacity of critical infrastructure, required connectivity to approximately 66,000 systems across 188 subnets, 46 VPNs, and 9 network domains.

My responsibilities included analyzing the current and desired network state, creating high- and low-level network designs (HLD, LLD), IP planning and management including DNS, and developing migration plans with connectivity and firewall matrices and the corresponding test plans. I also solved issues such as overlapping networks, the preservation of specific IP addresses, and the analysis of unknown or poorly documented traffic flows. During execution, I implemented and configured network components (including firewalls) and carried out migrations by updating firewall policies and routing. I also delegated tasks within the team and remained available after handover as a specialist for specific network issues.

In this and earlier projects, I worked with Cisco (IOS, IOS-XE, IOS-XR, NX-OS), Juniper (Junos OS, JunosE), and Huawei (VRP), as well as technologies such as OSPF, EIGRP, BGP, route redistribution, VRF-Lite, MPLS (L2/L3 VPN), (R)STP, FabricPath, VLAN, PVLAN, 802.1Q, 802.1ad (QinQ), QoS (CoS, DSCP), virtual switching (Nexus, VSS, vPC, vSwitch), network integration within virtual environments such as VMware ESXi, IP address, DNS, and DHCP management using systems such as Infoblox DDI, and out-of-band management using console servers such as Avocent (Cyclades) ACS. I have also worked with monitoring and logging tools such as Cisco Prime LMS, CA Spectrum, IBM Netcool TNPM, Cacti, and syslog-ng, as well as analysis tools like Wireshark.

Network Security

Network security tailored to your infrastructure

I improve network security by making existing systems more secure, transparent, and manageable. I also implement new security solutions tailored to the organization’s infrastructure, needs, and risk profile.

I have extensive experience in large-scale firewall and security management, having managed over 300 physical and virtual firewalls in service provider and multi-tenant data center environments.

I’m familiar with Cisco (ASA, CSM), Check Point, and Fortinet (FortiGate, FortiManager, FortiAnalyzer), among others, as well as with techniques such as access control using Cisco ACS and NAC (802.1X), MFA with RSA SecurID, network segmentation, firewalling, VPN solutions (IPsec, SSL, remote access, and site-to-site), intrusion detection & prevention (IDS/IPS), application control, web filtering, antivirus/antimalware, and logging & monitoring.

Network Automation

Smarter network management through automation

I automate network management to make it more efficient, reliable, and adaptable.

I combine networking experience with professional experience in software development — a combination that laid the foundation for my DevNet certification and enabled me to further develop my skills in infrastructure automation, API integrations, and DevOps practices.

I’m familiar with Infrastructure-as-Code using Python, Ansible, and Terraform, CI/CD with Jenkins, Model-Driven Automation with YANG, NETCONF, RESTCONF, gNMI, and gRPC, event and streaming telemetry including MDT, EDT, and the TIG stack (Telegraf, InfluxDB, Grafana), and API/SDK integrations with Cisco IOS-XE, IOS-XR, NX-OS (including NX-API and NDFC), Firepower (FTD, FMC), Meraki, SD-WAN, DNA Center, UCS Manager, Intersight, AppDynamics, and Webex. I have also worked with Python libraries such as Netmiko and NAPALM, with frameworks such as Django and Django REST Framework, with databases such as PostgreSQL, with platforms such as Nautobot, and with version control via GitHub and GitLab.

DevNet 500

Recognized as a pioneer in network automation

I'm proud to be recognized by Cisco as one of the first 500 professionals worldwide to earn a DevNet certification. This distinction places me among a select group of pioneers who have embraced Cisco’s vision for network automation since its inception.

It highlights my ambition to embrace new technologies early and to continue developing myself within my field.

In addition to the DevNet 500 badge, there’s also a short video in which Cisco reflects on this recognition.

• Experience in enterprise and MSP environments

  I’ve worked on mission-critical networks with high demands on availability, security, and performance — including at KPN and Optiver. As a result, I’m used to operating in complex environments with multiple teams, systems, and interests. I understand the impact of my work, adapt quickly, and make sure my solutions align with the broader context.

• Network + software = automation with depth

  I combine years of networking experience with professional experience in software development. This background has allowed me to deepen my specialization in network automation — enabling me not only to better understand processes, but also to improve them structurally.

• Security by design

  Security has never been an afterthought for me — it’s an integral part of my work and approach. Whether I’m designing infrastructure or automating technical processes, security is built in from the start. This results in solutions that are not only efficient and manageable, but also secure and well thought out.

For clients

I’m available for assignments and projects — either independently or as part of your team. Part-time work can be discussed.

I prefer working in the The Hague area but am also open to assignments and projects in Rotterdam, Amsterdam, or Utrecht. Work outside the Randstad can be discussed.

There are three ways we can work together:

• via freelance platforms such as Jellow, HeadFirst, or Malt:

  The contract, invoicing and payments, insurance, and legal coverage are all taken care of.

• via your own broker or intermediary:

  You choose — I’ll adapt.

• directly through my business:

  By mutual agreement — for example, based on a model contract or a custom agreement.