Cloud network & security architecture

Secure, scalable networks for the cloud and beyond.

Dashwood Network Services designs, builds and automates network and security solutions across AWS, Azure, GCP and on-premises, led by an architect with over 30 years in the industry.

Services

From architecture to automated delivery

Hands-on design and engineering for complex transformation projects, on a contract or consultancy basis.

Cloud network architecture

Landing zones, Transit Gateway, hybrid connectivity, Direct Connect and ExpressRoute, and multi-cloud designs across AWS, Azure and GCP.

Network security

Next-generation firewalls, SASE and ZTNA, mTLS API ingress, decryption and IPS, DDoS mitigation, segmentation and PCI-aligned security postures.

Network automation

Infrastructure as code with Terraform, OpenTofu and Ansible, delivered through Git and CI/CD pipelines for repeatable, auditable change.

Enterprise, WAN & SD-WAN

Data centre, campus LAN, Wi-Fi, SD-WAN and MPLS designs, including routing with BGP and OSPF and load balancing.

OT & manufacturing networks

Plant LAN, WAN and Wi-Fi architecture, IT/OT integration and east/west security aligned with IEC 62443.

Architecture & consultancy

Requirements, HLDs and LLDs, vendor selection and PoC testing, RFP support, roadmaps and governance board approval.

About

Jim Dashwood, Network & Security Architect

Dashwood Network Services is led by Jim Dashwood, a cloud network and security design engineer and architect. Jim has spent more than three decades designing and building networks, from service provider cores to cloud landing zones, and combines architecture with a hands-on approach to delivery.

  • Multi-vendor: Palo Alto, Fortinet, Cisco, Arista, Zscaler, Netskope, F5 and more
  • Sector experience in fintech, retail, e-commerce, enterprise, ISP, hosting and manufacturing
  • Comfortable in Agile DevOps and Waterfall delivery
  • Works closely with InfoSec, stakeholders and third-party partners
30+Years in networking
HybridCloud and on-premises
3Clouds certified: AWS, Azure, GCP
IaCTerraform-first delivery
Experience

Selected projects

A sample of recent engagements. Client names are withheld.

Payments platform: secure API ingress

Public internet mTLS ingress for APIs on AWS using NGINX, auto scaling, Palo Alto and API Gateway, with decryption, IPS and Shield Advanced DDoS protection. Fully automated with Terraform.

Retailer: AWS landing zone migration

Migration from a third-party transit VPC to Transit Gateway, with Palo Alto firewalls behind Gateway Load Balancer and GlobalProtect remote access.

Automotive: manufacturing plant networks

Lead architecture for LAN, WAN and Wi-Fi at new car plants on two continents, and IEC 62443 aligned security designs integrating Fortinet, Zscaler, Cisco and Arista.

Multi-cloud: AWS to GCP

Firewalls, cloud routers and VPNs in GCP with OpenTofu, and resolving connectivity as applications moved from AWS to GCP.

Energy: Azure and Fortinet estate

Centralised Fortigate management and logging, Azure HA failover, client VPN migration and Wi-Fi estate migration.

Global retail: network as a service

Technical lead on an RFP to select a global provider for SD-WAN, LAN, Wi-Fi and security across thousands of sites.

Certifications

Qualified across every major platform

  • AWS Certified Advanced Networking, Specialty
  • Microsoft Azure Network Engineer Associate (AZ-700)
  • Google Cloud Professional Cloud Network Engineer
  • Cisco CCIE #14599 (Emeritus)
  • BA (Hons), Loughborough University of Technology

Let's talk about your network

Planning a cloud migration, a security uplift or a new site? Get in touch to discuss your project and availability.

Email Jim