Cloud, network & security architecture

Infrastructure that real estate, banking and payments companies run on.

I'm Yared Demissie. Since 2006 I've worked as an independent architect and technical lead, usually embedded with a client for years at a time, owning the network and security layer from design through operation.

Start a conversation LinkedIn profile
2006Yared Consulting Inc founded
10 yrsLongest active engagement
1stNew Direct Clearer in Canada since 1984, built with Peoples Trust
4Continents of Azure network estate led for Colliers

Selected work

Long engagements, real outcomes. Each of these is an infrastructure I designed, built and then stayed on to run.

Peoples Trust · Payments · 2018 to 2023

Canada's first new Direct Clearer since 1984

Technical Lead on the ACSS project that took Peoples Trust from Indirect to Direct Clearer for exchange, clearing and settlement. Built the Azure payment platform, the datacenters and networks joining the Payments Canada network, and the security controls that exceed its requirements. Live June 2022.

  • IBM Connect:Direct implemented and automated with custom code
  • End-to-end validation with Payments Canada and the existing direct clearers before go-live
  • AWS and Azure network estate: Palo Alto Transit VPC pattern automated with Terraform, GlobalProtect with SAML MFA, PCI compliance and audit
Colliers · Real estate · 2022 to present

Global Azure network lead

Hub-and-spoke with active-active firewalls across Canada, the US, EMEA and APAC, then Azure vWAN. Network design patterns for every application team, networking for a new Google Cloud environment, and an Aruba CX spine-leaf datacenter with Palo Alto 5410s and F5.

QuadReal · Real estate · 2016 to present

Greenfield estate to Azure

Designed the datacenter, head offices, remote sites and DR from scratch, then led the exit from physical datacenters into Azure and a WAN redesign on SD-WAN, Prisma Access and Equinix Network Edge. GPON for smart buildings; 5G and wireless offload for commercial and residential properties.

VCC · Education · 2024 to present

Two campuses to Aruba AOS 10

Migration from AOS 8 mobility controllers to AOS 10 on Aruba Central with 9106 gateway clusters and inter-campus site clustering, so the APs at one campus fail over to the other. A year earlier, a Palo Alto redesign so the downtown campus runs independently of Broadway.

What I do

Three kinds of engagement. Most clients start with one and keep me on for the others.

01

Cloud and network architecture

Azure, AWS and Google Cloud network design; hub-and-spoke and vWAN; datacenter fabrics; SD-WAN and WAN redesign; wireless with Aruba Central and ClearPass. From requirements and HLD/LLD through proof of concept, cutover and as-built.

02

Security and firewall programs

Palo Alto migrations, Panorama, GlobalProtect and Prisma Access; firewall hardening and best-practice assessments; PCI and Payments Canada compliance; segmentation and VRF design that lets a site survive on its own.

03

Fractional technical lead

Leading engineers, PMs and analysts through assessments, landing zones and remediation; writing the service catalog, security policies and playbooks; and staying on to run what was built.

Stack

Microsoft AzureAWSGoogle CloudPalo Alto NetworksAruba CX, Central & ClearPassF5SD-WAN (Velocloud, Viptela)CloudflareTerraformNutanixCiscoCheck PointPCI DSS

I take on a small number of long-term engagements.

If you need an architect who can own the network and security layer end to end, and stay accountable for it after go-live, tell me a little about the project. I reply within two business days.

Principal
Yared Demissie
Based in
Greater Vancouver, BC. Remote and on-site.
LinkedIn
linkedin.com/in/yared