Cloud, network & security architecture

The infrastructure your business runs on, designed by someone who stays to run it.

I'm Yared Demissie. Since 2006 I have worked as an independent architect and technical lead for real estate, banking, payments and education clients, usually embedded for years at a time and accountable for the network and security layer after go-live.

yared-consulting.specv2026.09
founded 2006
principal Yared Demissie
base Greater Vancouver, BC
engagement long-term, fractional
longest_active 10 yrs (QuadReal)
clouds Azure · AWS · GCP
security Palo Alto · Aruba · Cloudflare
status selective, long-term
Engagements ColliersQuadRealPeoples TrustVancouver Community CollegeBCLCGLP Capital Partners

Selected work

Four engagements, each one designed, built and then run. The numbers are the point.

01 / Peoples TrustPayments · 2018 to 2023
1stnew Direct Clearer in Canada's payment system since 1984

Technical Lead, ACSS Direct Clearer project

Built the Azure payment platform, the datacenters and networks joining the Payments Canada network, and the security controls that exceed its requirements. Automated IBM Connect:Direct, validated end to end with Payments Canada and the existing direct clearers, and went live in June 2022.

AzureAWSPalo AltoTerraformPCI DSSPayments Canada
02 / ColliersReal estate · 2022 to present
4continents of Azure network estate led

Global Azure network lead

Hub-and-spoke with active-active firewalls across Canada, the US, EMEA and APAC, then the move to Azure vWAN. Network design patterns used by every application team. Networking for a new Google Cloud environment.

Architect on the datacenter redesign to an Aruba CX spine-leaf fabric with Palo Alto 5410s, F5 and Velocloud SD-WAN.

Azure vWANGoogle CloudAruba CXPalo AltoF5
03 / QuadRealReal estate · 2016 to present

Greenfield estate, then the exit to Azure

Designed the datacenter, head offices, remote sites and DR from scratch. Led the migration out of physical datacenters into Azure and a WAN redesign on SD-WAN, Prisma Access and Equinix Network Edge. GPON for smart buildings.

AzureSD-WANPrisma AccessNutanixClearPass
04 / Vancouver Community CollegeEducation · 2024 to present

Two campuses to Aruba AOS 10, with inter-campus failover

Migration from AOS 8 mobility controllers to AOS 10 on Aruba Central: 9106 gateway clusters at each campus, site clustering so the APs at one campus fail over to the other, ClearPass split across sites. A year earlier, a Palo Alto redesign so the downtown campus runs independently of Broadway.

Aruba CentralAOS 10ClearPassPalo Alto

What I do

Three kinds of engagement. Most clients start with one and keep me on for the others.

01

Cloud and network architecture

Azure, AWS and Google Cloud network design. Hub-and-spoke and vWAN. Datacenter fabrics, SD-WAN and WAN redesign, wireless on Aruba Central and ClearPass. Requirements and HLD/LLD through proof of concept, cutover and as-built.

02

Security and firewall programs

Palo Alto migrations, Panorama, GlobalProtect and Prisma Access. Firewall hardening and best-practice assessments. PCI and Payments Canada compliance. Segmentation and VRF design that lets a site survive on its own.

03

Fractional technical lead

Leading engineers, PMs and analysts through assessments, landing zones and remediation. Writing the service catalog, security policies and playbooks. Staying on to run what was built.

Stack

Tools I have run in production, not a logo wall.

CloudMicrosoft Azure, AWS, Google Cloud
FirewallsPalo Alto (Panorama, GlobalProtect, Prisma Access), Check Point
Campus and DCAruba CX, Central, ClearPass, AirWave; Cisco; Nutanix
EdgeCloudflare, F5, NetScaler
WANSD-WAN (Velocloud, Viptela), Equinix Network Edge
AutomationTerraform, n8n
CompliancePCI DSS, Payments Canada

Common questions

What people usually ask before they get in touch.

What kind of work does Yared Consulting take on?

Cloud, network and security architecture for organizations that need someone to own that layer end to end: Azure and multi-cloud network design, Palo Alto firewall programs, Aruba campus and datacenter networks, SD-WAN and WAN redesign, and fractional technical lead roles. Most engagements run for years rather than weeks.

Which industries do you work in?

Mostly real estate, financial services and payments, and post-secondary education. Current and recent clients include QuadReal, Colliers, Vancouver Community College and Peoples Trust, where I was Technical Lead on Canada's first new Direct Clearer since 1984.

Where are you based, and do you work remotely?

Surrey, in Greater Vancouver, British Columbia. I work remotely and on site. Clients have included teams across Canada, the US, EMEA and APAC.

Do you work through an agency or directly?

Directly. Yared Consulting Inc has been an independent company since 2006, and I am the person who does the work.

How does an engagement start?

Send a short note through the contact form describing the project. I reply within two business days, and we start with a conversation about scope before any proposal.

Contact

I take on a small number of long-term engagements.

Tell me a little about the project. I reply within two business days.

Principal
Yared Demissie
Based in
Greater Vancouver, BC. Remote and on-site.
LinkedIn
linkedin.com/in/yared