Twenty-three years keeping networks up, while moving them forward.
Bilingual network architect working at the seam between carrier-grade infrastructure and enterprise scale. My background started on national backbones — China Telecom CN2, the China Netcom northern core — and has moved through banking and telco in East Africa, HPC fabrics for genomic research, and now a global retail and logistics estate.
I own the whole path: architecture, delivery, and production support — including the incident calls that arrive outside business hours. The last five years have been dominated by transformation — legacy on-premise to hybrid cloud, MPLS to SD-WAN, and low-latency Ethernet for AI clusters — and by the automation that keeps those changes reversible.
Where I've worked
Carrier, enterprise and integration — from provincial backbone to global estate.
- Own end-to-end network lifecycle for a global estate of 10+ data centres, 3,000+ retail stores, 60+ corporate offices and 65+ automated logistics and distribution centres — from architectural design to rapid incident response.
- Engineered and optimised SD-WAN and secure edge connectivity across 3,000+ outlets and 60+ corporate hubs, holding a consistent security posture across widely differing regions.
- Spearheaded the transition from legacy on-premise to a hybrid-cloud architecture on AWS, integrating AI infrastructure and low-latency switching for global business scale.
- Ran a global network transformation across 8 data centres and 2,000+ retail boutiques for multiple prestige brands in Greater China and APAC, unifying a fragmented, high-availability estate.
- Led architectural design and deployment of Huawei Qiankun cloud-managed networking — centralised visibility, automated configuration and AI-driven troubleshooting for mass-scale distributed branches.
- Consolidated separate brand infrastructures into one software-defined fabric: 25% lower operational overhead, 40% faster branch deployment.
- Delivered SASE with cloud firewall, IPS and anti-DDoS, holding PCI DSS compliance across every point of sale.
- Full-lifecycle ownership of 16 enterprise data centres worldwide at 99.999% uptime for mission-critical learning and assessment platforms.
- Engineered the resilient fabric behind 5,500+ Pearson VUE test centres — secure, low-latency connectivity for high-stakes digital examinations.
- Managed 12 corporate offices across Greater China with SD-WAN and VPN for cross-border collaboration; led large-scale hardware refresh and firmware lifecycle across the global backbone.
- Tier-3 escalation for complex global routing and switching faults, using packet analysis to hold strict SLAs for millions of users.
- Sole point of contact for all network infrastructure across Greater China, covering NIBR Shanghai and the corporate headquarters.
- Engineered VPLS backbones linking China to strategic data centres in Switzerland, Boston and Singapore, with BGP/MPLS traffic engineering for 24×7 research data synchronisation.
- Maintained Arista and Cisco Nexus fabrics for HPC clusters at zero packet loss, and ran a 2,000-AP campus wireless estate.
- Banking — HA data centre architectures on Nexus (vPC, OTV) and ASR for Equity Bank, KCB, Standard Chartered and ABSA; DR over MPLS L2/L3 VPN; ASA/Firepower and ISE for NAC.
- Carrier — Level-3 support and optimisation of IP/MPLS cores for Safaricom and Telkom Kenya, including large-scale BGP peering and IXP traffic engineering.
- Critical infrastructure — hardened SCADA/EMS networks and Cisco Industrial Ethernet in substations for Kenya Power.
- Deployed China Telecom CN2 with carrier-grade MPLS VPN and QoS; led the ATM/FR to IP/MPLS migration of the China Netcom northern backbone, with IS-IS and BGP optimisation across provincial nodes.
- Designed China TieTong metro networks on 7600/12000 platforms, and delivered SONY China wireless at 3,000+ APs with redundant controllers.
- Owned network and database security planning, delivery and ongoing management across the company and its branch offices.
What I build when nobody asks
Five live web products, plus three apps of my own — built and maintained end to end.
Technical depth
Carrier routing and data centre fabric first; security and automation built around it.
Certifications & education
Three CCIE tracks on the same number, earned between 2003 and 2009.
Looking for someone who can own a global network — architecture, delivery, and the automation around it?
Based in Shanghai, open to senior architect and technical lead roles. I reply to every message within a business day.