Capability Statement
DDITA is a managed services provider led by a senior network architect with more than 30 years designing, automating and securing enterprise-scale infrastructure — BGP and MPLS backbones, Cisco ACI fabrics, SD-WAN rollouts, Palo Alto firewall consolidations and Python-driven provisioning. That is the engineering behind every DDITA managed services agreement, project build and multi-site rollout.
Core competencies
Nine disciplines, from carrier-grade routing and next-generation firewall policy down to the cable in the wall and the monthly Microsoft bill.
EIGRP, OSPF and BGP design, global MPLS WAN, multi-link load balancing, Cisco Nexus and HPE Aruba core switching, and Cisco ACI software-defined data center fabric.
Design and deployment of secure enterprise SD-WAN on Cisco Meraki, Palo Alto and Aryaka, including full-stack migrations off fragmented legacy edge hardware with zero-downtime cutovers.
Palo Alto next-generation firewalls managed through Panorama, Prisma Access SASE, Cisco ASA and Checkpoint, Azure Firewall Premium, site-to-site and corporate VPN termination, Layer-7 application and user-aware policy.
HPE Aruba wireless and switching, centralized Aruba ClearPass RADIUS ecosystems, 802.1X onboarding for wired and wireless clients, and authentication failure root-cause analysis.
Python tooling against vendor APIs, zero-touch provisioning for physical and virtual firewalls, dynamically generated site configurations, and automated sync checks that keep policy consistent across regions.
Microsoft Azure networking and Azure Firewall policy under IaC principles, AWS cloud integration, hybrid routing between cloud compute and on-premises data centers, Microsoft 365 identity and DNS.
Low-voltage cabling design and installation, Cat5e through fiber: pathways, terminations, patching, labeling, rack and stack, testing and certification on completion.
RMM agent deployment, proactive monitoring, patch management, remote and on-site support, workstation and kiosk lifecycle, IP video surveillance installs.
Microsoft 365, endpoint security, password management and cloud backup licensed through Pax8 and billed as one monthly line with support included.
Engineering track record
Projects led by DDITA’s principal engineer in senior engineering and technical-lead roles at enterprise employers. Scope and outcomes are described without naming the organizations or disclosing their internal configurations.
Execution. Led a cross-functional engineering team replacing fragmented legacy edge hardware with a unified cloud-managed Meraki fabric: SD-WAN, enterprise switching and next-generation security rules in a single dashboard.
Impact. Standardized network delivery templates, shorter edge deployment timelines, centralized visibility across global operations, and zero-downtime cutovers during critical business hours.
Execution. Technical lead for harmonizing edge security across several corporate entities acquired by the parent organization. Directed a distributed consultant team through discovery and mapping of legacy ACLs, translated them into Palo Alto Layer-7 application and user-aware profiles, and enforced unified policy through Panorama.
Impact. Eliminated vulnerabilities inherited from acquired sites, standardized corporate VPN terminations and unified the edge security posture.
Execution. Built custom Python libraries that query API endpoints and ingest real-time RADIUS and authentication logs. Automated log correlation isolated a flawed Group Policy Object being pushed to all wired and wireless clients.
Impact. A 70% reduction in authentication failure events after remediation, stabilizing endpoint onboarding and cutting NOC overhead.
Execution. Designed modular Python automation for the security device provisioning pipeline: hands-free ZTP for physical and virtual Palo Alto NGFWs and Cisco ASAs, generating site-specific XML and text configurations, baseline security policy, encrypted VPN and local routing.
Impact. Edge firewall build time dropped from multiple days of engineering labor to single-digit, error-free automated hours.
Execution. Engineered network security policy across a multi-tenant public cloud footprint using Azure Firewall and Azure Firewall Premium, applying Infrastructure as Code alongside native cloud shell configuration for NAT, application and network rule collections bridging cloud compute to on-premises data centers.
Impact. Continuous automated sync checks keep rule changes consistent across all global regions, maintaining operational compliance.
Technical capability
The hands-on skill set behind the service list, grouped the way a technical buyer reads it.
Partnerships & credentials
A small firm with enterprise reach: partnerships supply the coverage and the licensing, DDITA supplies the engineering and the accountability.
DDITA operates as a managed services provider: a monthly agreement covering monitoring, patching, security, helpdesk and licensing, with documented environments and defined escalation. When a client has sites outside our region, we extend coverage through the Field Nation field service network, with work-order dispatch, check-in and check-out, photo evidence and close-out documentation as standard.
Microsoft 365 and Azure, plus security, backup and productivity software, delivered through our Pax8 partnership. You get one monthly invoice from DDITA covering licenses and management, seats adjusted up or down as the team changes, and one person to call when something breaks — no vendor queue.
Cisco CCNP and CCNA (Routing & Switching) held during enterprise tenure, backed by 30 years of production work on the same platforms. Former adjunct instructor for the Cisco Networking Academy at Ivy Tech Community College, teaching routing, switching, wireless and security. Eligible for Secret clearance. MBA, with a M.S. in Applied Data Science in progress.
Career history
Senior network engineering roles from 1995 to today, across financial services, healthcare, managed services, technology integration and manufacturing. Employers are described by sector rather than by name; specifics are available on request.
SD-WAN architecture across Palo Alto, Aryaka and Cisco Meraki; data center core switching; Aruba ClearPass RADIUS ecosystems; Prisma Access through Panorama. Leads and mentors junior engineers, consultants and on-site help desk staff through perimeter security and core infrastructure migrations.
Taught NetAcad routing, switching, wireless and security across accelerated terms, running labs on physical Cisco hardware, Packet Tracer and NETLAB+, and preparing students for the CCNA exam.
Hands-on technical management and Tier III support for enterprise architectures spanning Cisco ACI SDN, SD-WAN, Meraki and HPE Aruba wireless and switching, supervising engineering workflows and vendor coordination.
Cloud integrations spanning AWS architectures and corporate connectivity using BGP attributes, Cisco Meraki profiles and Juniper PE setups.
Directed backbone migration projects consolidating Cisco core systems, F5 / NetScaler components and security platforms, coordinating third-party vendors.
Designed fault-tolerant multi-site environments on global MPLS WAN with Checkpoint firewalls and Cisco ASA VPN connections.
Built nationwide enterprise WAN platforms using multi-link load balancing, BGP/MPLS routing and Cisco core infrastructure.
Earlier roles in telecom software, IT services and transportation manufacturing covered Cisco-centric network migrations, WAN optimization and multi-location security integration. Employer names and references are available on request under NDA.
Engagement models
Scoped work with a fixed deliverable: a firewall migration, an SD-WAN rollout, a cabling build, an office move, a site refresh. Quoted up front, documented at handoff.
A monthly agreement covering monitoring, patching, support and licensing. Predictable cost, one point of contact, no hourly surprises.
White-label on-site and remote delivery for other MSPs, VARs, integrators and OEMs needing hands or engineering depth in our region, worked to your project standards and your brand.
Rates and what each model includes are on the pricing page.
Past performance
Delivered as an independent consultant through subcontract partners. Named organizations are the environments the work was performed in, not endorsements.
Multi-site network infrastructure refresh. Layer 1 structured cabling, network hardware installation and rack work, cutover support and testing across four site engagements in low-voltage technician and installation technician roles.
Subcontract field engagement supporting enterprise deployment work.
Subcontract field engagement supporting retail site technology.
Managed services onboarding: site survey, network discovery, RMM agent deployment for remote monitoring and patching, environment documented for handoff.
IP video surveillance installs, self-service kiosk endpoint refresh and photo lab workstation replacement, each validated and returned to service.
Differentiators
The person scoping your network is the one who has run BGP backbones, Cisco ACI fabrics and multi-site firewall consolidations for banks, acquisitions and global operations.
Python and zero-touch provisioning have taken firewall builds from days of manual CLI to error-free automated hours. The same discipline keeps your configuration consistent and your bill predictable.
Cable, switch, firewall, wireless, cloud, licensing and support under one agreement instead of four vendors pointing at each other.
A vetted national field service network sits behind the managed services agreement, so a second or tenth location is a scheduling question, not a reason to hire another provider.
Classification
Prefer it tailored to a specific solicitation? Ask us for the current capability statement.
Tell us the scope and the locations. You will get a straight answer on fit, timing and cost within one business day.
