Profile

Twenty-three years keeping networks up, while moving them forward.

Bilingual network architect working at the seam between carrier-grade infrastructure and enterprise scale. My background started on national backbones — China Telecom CN2, the China Netcom northern core — and has moved through banking and telco in East Africa, HPC fabrics for genomic research, and now a global retail and logistics estate.

I own the whole path: architecture, delivery, and production support — including the incident calls that arrive outside business hours. The last five years have been dominated by transformation — legacy on-premise to hybrid cloud, MPLS to SD-WAN, and low-latency Ethernet for AI clusters — and by the automation that keeps those changes reversible.

23+
Years in networking
3,000+
Retail sites, one estate
10+
Data centres in scope
Experience

Where I've worked

Carrier, enterprise and integration — from provincial backbone to global estate.

2024-06 — PRESENT
Global Technical Lead Engineer
Infosys Technologies · Shanghai, China
  • Own end-to-end network lifecycle for a global estate of 10+ data centres, 3,000+ retail stores, 60+ corporate offices and 65+ automated logistics and distribution centres — from architectural design to rapid incident response.
  • Engineered and optimised SD-WAN and secure edge connectivity across 3,000+ outlets and 60+ corporate hubs, holding a consistent security posture across widely differing regions.
  • Spearheaded the transition from legacy on-premise to a hybrid-cloud architecture on AWS, integrating AI infrastructure and low-latency switching for global business scale.
2023-08 — 2024-06
Senior Network Architect
LVMH Group · China
  • Ran a global network transformation across 8 data centres and 2,000+ retail boutiques for multiple prestige brands in Greater China and APAC, unifying a fragmented, high-availability estate.
  • Led architectural design and deployment of Huawei Qiankun cloud-managed networking — centralised visibility, automated configuration and AI-driven troubleshooting for mass-scale distributed branches.
  • Consolidated separate brand infrastructures into one software-defined fabric: 25% lower operational overhead, 40% faster branch deployment.
  • Delivered SASE with cloud firewall, IPS and anti-DDoS, holding PCI DSS compliance across every point of sale.
2013-08 — 2022-12
Senior Network Engineer
Pearson Educational Measurement · China
  • Full-lifecycle ownership of 16 enterprise data centres worldwide at 99.999% uptime for mission-critical learning and assessment platforms.
  • Engineered the resilient fabric behind 5,500+ Pearson VUE test centres — secure, low-latency connectivity for high-stakes digital examinations.
  • Managed 12 corporate offices across Greater China with SD-WAN and VPN for cross-border collaboration; led large-scale hardware refresh and firmware lifecycle across the global backbone.
  • Tier-3 escalation for complex global routing and switching faults, using packet analysis to hold strict SLAs for millions of users.
2011-09 — 2013-06
Senior Network Engineer
China Novartis Institutes for BioMedical Research · China
  • Sole point of contact for all network infrastructure across Greater China, covering NIBR Shanghai and the corporate headquarters.
  • Engineered VPLS backbones linking China to strategic data centres in Switzerland, Boston and Singapore, with BGP/MPLS traffic engineering for 24×7 research data synchronisation.
  • Maintained Arista and Cisco Nexus fabrics for HPC clusters at zero packet loss, and ran a 2,000-AP campus wireless estate.
2008-06 — 2011-07
Senior Network Engineer
The Copy Cat Limited (Cisco Gold Partner) · Kenya
  • Banking — HA data centre architectures on Nexus (vPC, OTV) and ASR for Equity Bank, KCB, Standard Chartered and ABSA; DR over MPLS L2/L3 VPN; ASA/Firepower and ISE for NAC.
  • Carrier — Level-3 support and optimisation of IP/MPLS cores for Safaricom and Telkom Kenya, including large-scale BGP peering and IXP traffic engineering.
  • Critical infrastructure — hardened SCADA/EMS networks and Cisco Industrial Ethernet in substations for Kenya Power.
2005-08 — 2008-01
Senior Network Engineer
Wafer (China) Network Systems (Cisco Gold Partner) · China
  • Deployed China Telecom CN2 with carrier-grade MPLS VPN and QoS; led the ATM/FR to IP/MPLS migration of the China Netcom northern backbone, with IS-IS and BGP optimisation across provincial nodes.
  • Designed China TieTong metro networks on 7600/12000 platforms, and delivered SONY China wireless at 3,000+ APs with redundant controllers.
2003-09 — 2005-08
Network Consultant
Guangdong Esquel Textile Mill · China
  • Owned network and database security planning, delivery and ongoing management across the company and its branch offices.
Selected work

What I build when nobody asks

Five live web products, plus three apps of my own — built and maintained end to end.

Web products · 05
Mobile apps · 03
HOME
HomeFlow — Remote Control for HomeKit
iOS · App Store · 40 languagesLive
Air conditioners, smart lamps and speakers in one clean control surface: temperature and modes, colour and brightness, volume and playback — all reachable without opening four vendor apps.
Capabilities

Technical depth

Carrier routing and data centre fabric first; security and automation built around it.

Routing & Architecture
BGPOSPFIS-IS MPLSSR-TESRv6 VXLAN / EVPNSpine-LeafCLOS
AI & HPC Fabric
Fat-Tree (Clos)DragonflyRail-Optimised NVLink scale-upRoCEv2PFC ECN / DCQCNIncast mitigation
Low Latency & Multicast
Cut-through switchingPIM-SM / SSM IGMP v2 / v3MSDPDeterministic latency
Security, Cloud & SD-WAN
Cisco ASA / FirepowerPalo AltoFortiGate Check PointZscaler ZIA / ZPA / SSECisco ISE IPsec / DMVPNSD-WANSASE Huawei QiankunAWS hybrid cloud
Automation & Observability
PythonAnsibleNornir NetmikoInfoblox DDISplunk PrometheusGrafanaZabbix SolarWindsWiresharkNetFlow
Platforms
Cisco IOS-XE / XR / NX-OSASR / 7600 / 12000 Arista EOSJuniper JunosHuawei VRP Cisco Industrial Ethernet
Credentials

Certifications & education

Three CCIE tracks on the same number, earned between 2003 and 2009.

CCIE #13192 — Routing & Switching
Cisco Systems · 2003
CCIE #13192 — Security
Cisco Systems · 2005
CCIE #13192 — Service Provider
Cisco Systems · 2009
CCNP · CCNA · JNCIS · MCSE
Cisco · Juniper · Microsoft · 1999–2008
Shanghai Normal University
1999 — 2003
Languages
Chinese (Mandarin) · English — bilingual
Writing

Notes from twenty-three years of running networks

Working notes on routing, data-centre fabrics, AI-cluster networking and the parts of a migration that only show up in production. No sponsored placements, no vendor scripts.

All notes →

Looking for someone who can own a global network — architecture, delivery, and the automation around it?

Based in Shanghai, open to senior architect and technical lead roles. I reply to every message within a business day.