Network Analyst · Infrastructure Engineer · Auckland, NZ

Anjelo
Fernando.

I operate at the intersection of infrastructure and intelligence — translating high-level design into working infrastructure on the ground, and engineering clarity from complexity.

Scroll
Reliability
Connectivity
Performance
Reliability
Connectivity
Performance
The Baseline Philosophy
The network is the foundation. Everything else is just an application running on top of it.

Most people interact with the frontend of technology. I care about what sits underneath it — the cables, the switching fabric, the firewall rules, the routing table. The parts that have to work at 3am with no one watching. That’s where reliability actually lives.

I deliberately keep my own digital life simple. Not because I’m against technology — I build it for a living — but because staying off the constant feed means I can actually concentrate on hard problems. You can’t think through a complex VLAN design while your phone is pulling your attention every four minutes. Focus is infrastructure too.

Same approach in the gym. Same approach on a deployment. You assess the current state, you execute cleanly, you document what you did, and you improve the next time. I call it the Baseline: the simplest version of a system that does exactly what it needs to, nothing more.

Seek the Baseline · Always
Engineering

Network Analyst at Netbridge Ltd — deploying, configuring, and commissioning enterprise network infrastructure for SME clients. The boots on the ground for high-level design: I translate schematics into rack-mounted reality.

Hardware Lifecycle

Orchestrating the hardware lifecycle from initial schematic to procurement to post-deployment documentation — vendor engagement, quoting, ordering, and billing, ensuring no asset, license, or contract goes untracked.

“I don’t just plan the infrastructure — I build it, document it, and own it end-to-end.”

Enterprise-grade solutions
for the SME sector.

Network Infrastructure
SME Enterprise Networking
VLANsTrunkingIP AddressingRoutingSwitching
Virtualisation
Home Lab · Production Ready
VMware ESXiProxmoxDockerContainers
Security & Compliance
Defensive Mindset
CybersecurityFirewallsAsset MgmtCompliance
Governance & Asset Lifecycle
License · Contract · Inventory
Asset TrackingLicense MgmtProcurementContracts
Knowledge Preservation
Centralised Internal Wikis
BookStackChange RecordsNetwork DiagramsConfig Mgmt
VoIP & Telephony
3CX Advanced Certified
3CXVoIPSIP TrunkingTelephony
01 // Reliability

Every deployment is documented. Every change is recorded. Every asset is tracked. I don’t ship and forget — I build certainty.

02 // Connectivity

From Layer 1 cabling to Layer 3 routing — switches, firewalls, VLANs, VoIP, WAPs. The full physical reality of a connected organisation.

03 // Performance

Monitoring, incident response, and proactive optimisation. A network isn’t done when it’s deployed — it’s done when it’s consistently delivering.

Things I’m building.

Flagship Project · In Development
PlainSight

A Capstone project built for Netbridge — an operational intelligence dashboard that reduces alert triage from 45–60 minutes to under 10 seconds using a fully on-premise AI stack. Three integrated pillars: a Wazuh + Elasticsearch SIEM backend, a Streamlit dashboard with live alert feed, and a local phi3:mini LLM via Ollama that produces plain-English threat summaries with MITRE ATT&CK mapping. Zero data leaves the network. Zero cloud. Zero licensing fees.

phi3:mini · Ollama Wazuh SIEM Elasticsearch Streamlit Python MITRE ATT&CK VMware ESXi Zero Cloud
plainsight — log analysis
Wazuh Syslog — FortiGate 60E
03:41:18FortiGate: logdesc="SSH login failed" user="admin" src=203.0.113.45
03:41:19FortiGate: logdesc="SSH login failed" user="admin" src=203.0.113.45
03:41:20FortiGate: logdesc="SSH login failed" user="root" src=203.0.113.45
03:41:21Ruckus: dot1x_auth: 802.1X auth failure mac=3c:22:fb:a1:d4 vlan=corp
03:41:22FS-148F: VLAN config modified port=gi0/12 vlanid=40 user=LOCAL
phi3:mini · PlainSight Output
CRITBrute-force on WAN — 47 attempts, 203.0.113.45 · T1110
CRITBlock IP + audit admin credentials immediately
WARN802.1X failures on Ruckus R650 — T1078 Valid Accounts
WARNUnauthorised VLAN change on FS-148F switch port gi0/12
INFO3 incidents logged — AI summary in 8.2 sec
SIEM Backend
Wazuh + Elasticsearch + Logstash on Ubuntu via VMware ESXi — events indexed in <2 sec
phi3:mini · Ollama
Local LLM on ThinkCentre i5–8500T, 16 GB RAM — AI summary per batch in <10 sec
Streamlit Dashboard
Live feed, severity charts, MITRE ATT&CK tags, one-click PDF export in <30 sec
24/7Lab Uptime
3+Hypervisors
Things Broken
∞+1Things Fixed

Credentials.

3CX
3CX Advanced Certified
3CX · VoIP · SIP Trunking · Telephony
Advanced Certified
Dec 2025ID: OuYAhj1pmv
Google IT Support Certificate
Google · Wireless Networking
Professional Certificate
Jul 2025ID: UE22HGO05XE6

Academic background.

Unitec | Te Pūkenga Current
Bachelor of Computing Systems — Information Technology
Jul 2023 — Jul 2026
Key Focus Areas
Enterprise Networking Digital Forensics Security Governance
Curtin University
Foundation Degree — Information Technology
Dec 2021 — Dec 2022

Let’s connect.

Open to conversations in networking, IT operations, cybersecurity, and procurement. Always happy to hear from others building serious infrastructure.