Networking
Network Automation Toolkit
Production toolkit used across 75+ Cisco Catalyst 9300 migrations in live healthcare environments. Automates MAC/CDP comparison, port mapping, and baseline config generation — saving 3+ hours per cutover.
Network Engineer
Kieran Schoaf
I lead Cisco switch migrations for a multi-hospital healthcare system and build the Python tooling that makes them faster and safer.
CCNA and Network+ certified, with a BS in Network Engineering from DePaul. Outside of work, my homelab is where I try new protocols and automation before they go anywhere near production.
Currently studying for CCNP Service Provider and building a BGP lab in EVE-NG
- Switch migrations
- 75+
- Hospital locations
- 10+
- Unplanned downtime events
- 0
- Saved per cutover
- 3+ hrs
Experience
-
Dec 2022 - Present
Associate Network Engineer
AHEAD
Lead switch migrations for a multi-hospital healthcare system on Cisco Catalyst and Nexus, owning each site from pre-staging through post-migration stabilization.
- 75+ switch migrations across 10+ hospitals with zero unplanned downtime
- Built a Python/Netmiko automation toolkit used on every migration, saving 3+ hours per cutover
- Authored reusable MOPs, validation runbooks, and port-mapping templates adopted across the engagement
- Architected and executed Layer 2/3 cutovers on live Cisco Catalyst and Nexus infrastructure
-
Jun 2022 - Dec 2022
Desktop Support Engineer
BrainSurf Informatics Inc
Desktop and systems support at a fast-paced MSP while working toward a network engineering role.
- Supported 45+ clients across Windows/macOS, Active Directory, Exchange, and O365
- Led employee onboarding workflows: account provisioning, security access, hardware deployments
- Responded to phishing incidents and managed spam gateway operations
-
Nov 2020 - Jun 2022
Information Technology Support Technician
CMIT Solutions, Inc.
Primary technical resource for a two-person MSP serving small businesses, while completing a full course load in Network Engineering.
- Deployed and configured SentinelOne endpoint security across client environments
- Handled router/switch installations and wireless access point deployments for small office networks
- Delivered monthly executive briefings translating technical recommendations into business value
Projects
Production tooling from my day job and infrastructure I run at home.
Networking / Security / Homelab
AdGuard Home DNS Infrastructure
Dedicated DNS layer on a Raspberry Pi, integrated with a Ubiquiti Dream Machine to filter 19% of network traffic across all devices. Includes split-horizon resolution for internal self-hosted services. Running continuously since 2023.
Homelab
Immich On Unraid
Self-hosted photo library managing 11,000+ files with zero open inbound ports, accessed remotely via Cloudflare Tunnel. Data persistence validated under a real application rebuild — the library survived intact.
Skills & credentials
The tooling I use in production networks, automation work, and my homelab.
Network Infrastructure
Automation & Development
Infrastructure & Systems
Certifications
-
CCNA
-
CompTIA Network+
Education
-
BS Network Engineering
Homelab
My lab is where I test new protocols, automation scripts, and weird edge cases before they go anywhere near production.
-
Ubiquiti Dream Machine Pro
LiveCore router & firewall
Routing, firewall policy, IDS/IPS, and VLAN segmentation for the IoT, lab, and management networks.
-
Raspberry Pi 4
LiveDNS & split-horizon resolver
AdGuard Home filtering for every device on the network, plus internal .lan hostnames for self-hosted services.
Case study -
Unraid NAS
LiveStorage & container host
8TB array running Immich, PostgreSQL, and Redis in Docker, reachable remotely through Cloudflare Tunnel with no open inbound ports.
Case study -
EVE-NG
StudyingNetwork simulation lab
iBGP and eBGP sessions between simulated service provider routers for CCNP Service Provider study.
┌──────────────┐
│ ISP upstream │
└───────┬──────┘
│
┌─────────────────┴─────────────────┐
│ Dream Machine Pro │
│ Router / firewall │
│ VLANs: IoT · Lab · Mgmt │
└─┬───────────────┬───────────────┬─┘
│ │ │
┌──────┴─────┐ ┌──────┴─────┐ ┌──────┴─────┐
│ Pi 4 │ │ Unraid NAS │ │ EVE-NG │
│ AdGuard │ │ Docker │ │ BGP lab │
│ DNS │ │ Immich │ │ │
└────────────┘ └────────────┘ └────────────┘