A record, not a highlight reel.
A few engagements that show how a plan holds up under real constraints — a production deadline, an inherited breach, a network past its end-of-life. Client identities are protected under NDA, so each is described by the work rather than the name.
-
W01
Commercial / advertising production · On Location
When the device is the star, it can't miss its cue.
Every hero device on screen — the phone in the close-up, the screen a scene turns on — has to perform on cue, take after take, with A-list talent and a full crew waiting on it. That reliability isn't improvised on set. It's decided before anyone travels.
The work started in the script. Every scene was broken down with the creative team for what the technology had to do, and each hero device was prepped to hit its moment. On location, that meant working directly with talent and directors to refine how each device behaved in frame.
Everything was staged and tested before the location was ever reached. Shoot day was execution, not troubleshooting — hero moments landed on cue, and production never waited on the tech.
-
W02
Talent agency · Vancouver, BC
A legendary agency, running on borrowed bandwidth.
It worked until the day it didn't. A config change on the shared connection meant downtime on theirs — and behind the borrowed line sat a Meraki stack with a steep annual subscription, a ball-and-chain that came back every year whether the agency liked it or not.
Two moves cut both loose. The shared connection came out; a dedicated line the agency controls outright went in. The Meraki stack became UniFi — same security, same functionality, chain off. The network now answers to no one else's pipe — and no one else's invoice.
-
W03
Architecture studio · Vancouver, BC
End-of-life hardware. A ten-times-faster studio.
The studio's Meraki stack was dying on schedule — and every year of it came with a subscription bill for the privilege. A refresh wasn't optional. But instead of renewing the licensing treadmill, we took the exit.
The network wasn't replaced, it was entirely rebuilt. Netgate at the edge. UniFi switching throughout. A fiber aggregation switch lifting the backbone to 10 Gbps — ten times the headroom for a team whose entire day is moving heavy files between people. Remote staff came off Meraki VPN onto OpenVPN, keeping the office reachable with no licensing attached. The hardware is theirs now. The speed is theirs now. The subscription is gone.
The constraint: zero downtime. The whole cutover was planned to the hour and executed across one weekend. Staff logged off Friday on the old network, walked in Monday to one ten times faster — and didn't have to relearn a thing.
-
W04
Health-sector / Nonprofit · Vancouver, BC
They didn't know they'd been breached. Onboarding did.
The new client was already compromised and had no idea. A SIEM alert flagged the danger during onboarding — an intrusion that had been sitting quietly in the environment the whole time, backups included. You can't respond to what you can't see.
Containment came first. Then the harder call: anything the intruder touched couldn't be trusted, so the identity environment was rebuilt from scratch — legacy servers replaced and rebuilt on new hardware in a redundant, virtualized datacenter. Infrastructure that can lose a piece and keep running.
Backups went immutable, so the next intruder can't encrypt the way out. And the BC/DR plan gets rehearsed annually — not filed — so the next incident runs as a procedure, not a scramble.
Client identities are protected under NDA. For references or a fuller account of any engagement, get in touch.