Michael Guallpa

I am a network and systems engineer holding the Cisco CCNA 200-301 and CompTIA Network+ certifications, with hands-on experience across the full range of problems small and mid-market businesses run into: flat networks that need to be segmented, switching layers with no documentation, remote access configurations that expose more than they should, servers without working backups, and infrastructure that nobody left instructions for.

My networking work is in Cisco IOS: configuring and troubleshooting VLANs and 802.1Q trunks, designing inter-VLAN routing via Layer 3 switches or router-on-a-stick, tuning Spanning Tree (PVST+, Rapid PVST+, root bridge placement, PortFast, BPDU Guard), building EtherChannel uplinks with LACP for aggregation and redundancy, running OSPF in single and multi-area designs, writing ACLs for network-layer access control, and configuring NAT, DHCP relay, and DHCP snooping. This work has been applied on client networks and in extensive lab environments.

I administer Linux and Windows Server environments, deploy and manage containerized services with Docker Compose, and operate Proxmox VE virtualization infrastructure with ZFS RAIDZ storage, NFS-backed service mounts, and automated backup pipelines with tested retention policies.

DevOps and security hardening work covers the full stack: CI/CD pipeline configuration, Ansible-based configuration management for repeatable and auditable infrastructure, and infrastructure-as-code deployment workflows. Server hardening follows CIS benchmark practices: kernel parameter tuning via sysctl, auditd configuration, service minimization, and privilege separation. The access control and perimeter layer includes Tailscale Zero Trust VPN with per-group ACL policies, Authelia for SSO and MFA across internal applications, CrowdSec for intrusion detection, PKI and certificate lifecycle management, and Caddy as a reverse proxy with automatic TLS and HTTP security header enforcement.

I also have a background in end-to-end hardware support: diagnostics, repair, and component-level soldering on Windows, macOS, and Linux hardware. That background matters when a problem turns out to be physical rather than logical.

Subnet Works operates on a direct engagement model. When you work with Subnet Works, you work with me directly, from the initial call through implementation and ongoing support. No hand-offs, no account managers, no explaining the environment to someone new each time.