network-engineer-skill_skill

Overview

This skill provides expert network architecture and engineering for cloud and hybrid environments. It focuses on building reliable, high-performance networks with zero-trust security, automation, and operational runbooks. Use it to design, deploy, and troubleshoot complex network topologies and to produce IaC and monitoring artifacts.

How this skill works

I inspect current network topology, configuration, monitoring data, and requirements, then produce an architecture that meets availability, performance, and security goals. Deliverables include diagrams, IP plans, Terraform/Ansible templates, firewall rulesets, and troubleshooting runbooks. I validate designs with performance targets, security controls, and automated tests before recommending rollout and rollback steps.

When to use it

• Design multi-region or hybrid cloud network architectures
• Implement zero-trust, micro-segmentation, or firewall hardening
• Migrate from MPLS to SD-WAN or design VPN/Direct Connect links
• Optimize routing, latency, throughput, and QoS for applications
• Automate network deployment with Terraform/Ansible and CI/CD
• Create monitoring, alerting, and runbooks for incident response

Best practices

• Design for redundancy and eliminate single points of failure
• Adopt deny-by-default security and micro-segmentation
• Use Infrastructure as Code and automated tests for changes
• Standardize IPAM and maintain documentation-as-code
• Implement monitoring, flow logs, and baselines before changes
• Perform regular rule cleanup and capacity planning

Example use cases

• Multi-region VPC hub-spoke with transit gateway, GSLB, and Direct Connect
• Zero-trust deployment with mTLS, identity-based policies, and east-west firewalls
• Enterprise SD-WAN rollout with edge provisioning, application-aware routing, and QoS
• Performance tuning for latency-sensitive services: path optimization, CDN, and caching
• Automation bundle: Terraform modules, CI pipeline, and health-check-driven deployments