Available for New Engagements · 2026

Secure by Design.
Resilient by Architecture. Senior-led cybersecurity & network engineering

15+ years of senior practice across the Balkans, EU, and Canada — formalised as Network Sentinel in 2021. Senior-led engagements for startups and mid-market organisations: from initial assessment to full deployment, we don't just consult, we build.

0
Years in the Field
0
Countries Delivered In
0
Uptime Track Record
0
Breaches Under Our Watch
Technologies we work with
AWS VMware ESXi Microsoft 365 Google Workspace Cato Networks Cisco Palo Alto
// CISA KEV · LIVE FEED
— vulnerabilities tracked · updated — View source ↗
// fetching latest CVEs...

Full-Stack Expertise.
Every Layer Protected.

From cloud migration to Zero Trust architecture — we cover every dimension of your infrastructure.

AWS Cloud Consulting

EC2, DirectConnect, Route53, VPC design, IAM hardening, and hybrid cloud architecture built for security and scale.

EC2DirectConnectRoute53VPC
Learn more

Microsoft 365 Services

Exchange Online, Intune MDM, Defender for Endpoint, Conditional Access, and Entra ID — fully deployed and hardened.

ExchangeIntuneDefenderEntra ID
Learn more

Google Workspace Admin

End-to-end Workspace deployment, SSO/SAML, mobile policy enforcement, Drive DLP, and identity governance.

SSO/SAMLMDMDLPAdmin Console
Learn more

Security Consulting

Zero Trust architecture, SASE implementation with Cato Networks, ISO 27001 alignment, threat modeling, and incident response planning.

Zero TrustSASECatoISO 27001
Learn more

System Architecture

VMware ESXi hypervisor deployment, vSphere/vSAN, Windows & Linux server administration, AD/DNS/DHCP design for enterprise environments.

ESXivSphereWindowsLinux
Learn more

Network Architecture

Greenfield to production. Cisco routing & switching, SD-WAN, VLAN segmentation, BGP/OSPF, firewall policy design, and 24/7 NOC-ready monitoring stacks.

CiscoSD-WANBGPNGFW
Learn more

We Don't Just Advise.
We Execute.

Direct Practitioner Access

No account managers or junior staff between you and the expert. You work directly with engineers with 15+ years of real-world deployments.

End-to-End Ownership

From initial architecture document to final go-live handover — we own the outcome, not just the slide deck.

Zero-Downtime Track Record

15+ years of network and infrastructure deployments — including a multi-site Canadian telecom run with a 100% uptime guarantee — without a single breach under our watch. We plan obsessively so you don't experience emergencies.

Security-First by Default

Every engagement is scoped with a security lens first. Compliance and hardening aren't afterthoughts — they're designed in from day one.

NETWORK SENTINEL // ARCHITECTURE VIEW INTERNET / WAN BGP · SD-WAN · ISP Uplinks NGFW / EDGE SECURITY IPS · DPI · Geo-block · VPN SD-WAN Cato SASE CORE SWITCHING Cisco Catalyst · VLAN Seg. DMZ Public Services SERVERS ESXi Cluster USERS Intune · Defender AWS CLOUD EC2 · Route53 · VPC DirectConnect IAM · Security Groups ESXi CLUSTER vSphere · vSAN · HA MICROSOFT 365 Exchange · Intune · Entra ID SIEM / MONITORING Log Agg. · Alerting · NOC

Case Studies in the Field

Real engagements. Measurable outcomes. Names anonymized per NDA.

Case 01

Cato SD-WAN Migration — Multi-Site Telecom

Telecommunications · ~100 Users · Multi-Site (Canada)

Migrated a multi-site Canadian telecom from Cisco ASA / MPLS to Cato Networks SD-WAN with ZTNA. Phased cutover preserving 24/7 operations and the firm's 100% uptime guarantee for telecom service delivery.

Cato SD-WAN fabric replacing legacy ASA / MPLS
ZTNA layer for remote and contact-centre users
100% telecom service uptime maintained throughout
Case 02

AWS DirectConnect & Multi-Cloud Architecture

Telecommunications · Multi-Site · Geo-Redundant

Designed and deployed AWS DirectConnect with private BGP peering between local contact centres and AWS, plus complementary Azure cloud services. Geo-redundant architecture for client data, encryption, and retention with location-sensitive controls.

Private fibre BGP peering to AWS via DirectConnect
Multi-cloud architecture across AWS and Azure
Geo-redundant operations across multiple data centres
Case 03

Cross-Border ISO 27001 Compliance Program

Wholesale / Distribution · ~100 Users · Six Countries

Owned ISO 27001 certification compliance for a wholesale security firm operating across Serbia, Montenegro, Bosnia & Herzegovina, Croatia, Slovenia, and North Macedonia. Subsequent migration projects from ISO 27001:2013 to the 2022 revision — gap analysis, control mapping, ISMS refresh, audit preparation.

Single ISMS spanning six countries and jurisdictions
2013 → 2022 migration: 93-control Annex A remap
Audit-ready documentation and evidence trails
Case 04

HA Mail Platform & Virtualization at Scale

Wholesale / Distribution · 200+ Mail Users

Built and administered a high-availability mail platform on Linux (Postfix, Dovecot, Amavisd, Postgrey, Roundcube) for 200+ users with load balancing. VMware ESXi and Citrix XEN virtualization for Windows Server 2012/2019 and RHEL/Fedora workloads. Active Directory implementation across the same estate.

200+ user HA mail platform with load balancing
VMware ESXi and Citrix XEN at production scale
Active Directory implementation and ongoing ops

A Process Built for Zero Surprises

01 // Discovery

Assess & Understand

We start with a deep-dive into your environment — existing topology, threat surface, compliance obligations, and business goals. No assumptions.

02 // Design

Architect the Solution

Detailed design documents, network diagrams, security policies, and implementation runbooks — approved by you before a single command is run.

03 // Deploy

Execute with Precision

Staged rollouts with rollback plans at every step. Change windows respected. Stakeholders informed. Our zero-downtime record speaks for itself.

04 // Handover

Document & Transfer

Full runbooks, network diagrams, admin credentials, and team training. You own everything — no lock-in, no dependency on us to keep the lights on.

Free tools to get started.

Three ways to evaluate your situation before you talk to us — or any consultancy. All free, no email required for the assessment.

Your Network Deserves a Sentinel.

Start with the free 5-minute assessment — no email required, no commitment, just an honest read on where you stand and where you should be.