Watch it converge.
Every claim about resilience is a claim about what happens in the seconds after something breaks. This is the behavior we engineer into every design: a link dies, traffic pivots to diverse transport, and the network converges before anyone files a ticket.
Nine domains.
One discipline.
Enterprise Networking
Campus, branch, and WAN architecture — routing, switching, segmentation, and lifecycle discipline.
Data Center Networking
Spine-leaf fabrics, EVPN/VXLAN, and interconnect designed for the workloads on top, not the SKU sheet.
Wireless
Surveyed, engineered Wi-Fi and point-to-point RF — designed from measurements, not floor plans.
Mobile Communications
Cellular and LEO bonded into redundant multi-WAN uplinks — Peplink-class transport for fleets, field teams, and platforms that move.
Tactical Networking
DDIL-ready, transport-diverse comms that treat disconnection as a design input, not a failure.
VPN Infrastructure
Site-to-site and remote access at scale — IPSec architectures, key management, and transport migrations.
Network Monitoring
Telemetry, flow analytics, and alerting tuned so the first sign of trouble isn't a user call.
Performance Testing
Baseline, load, and impairment testing that proves capacity claims before production traffic does.
Automation
Config pipelines, drift control, and infrastructure as code — the network as a system, not a set of devices.
Proven where it counts.
Theater-level SD-WAN architecture
Cisco SD-WAN architecture and application-aware routing design for a theater-level air command — transport-diverse, policy-driven, and built for WAN conditions that are contested by default.
900-bed hospital network migration
Access-layer modernization for a flagship academic medical center — legacy switching to Catalyst 9400/9300 on current IOS XE, tooling-driven config translation and validation, cutovers run against a hospital that never closes.
Data center firewall migration
Cisco ASA to Palo Alto migration for a defense contractor's data center — policy translation, staged cutover, and validation under change control.
Enterprise voice transport migration
MPLS to IPSec migration of enterprise voice for a large defense contractor — with collaboration performance remediated in the same engagement.
Client identities withheld by design. References available in conversation.
Where the standard
was set.
ETHRX's network practice is led by a Marine Corps veteran and CCIE Enterprise Networking architect who spent over a decade supporting senior leader communications for the Department of Defense, the Navy, Marine Corps, TSA, DHS, and the Department of Energy — environments where a failing network was never an acceptable outcome. That standard is the baseline for every engagement we take.
Engineering, not integration resale.
Every design is owned and defended by the engineer who built it — no channel margin deciding your architecture.
Documented and defensible.
Diagrams, configs, and rationale ship with the network. If we got hit by a bus, your network would not notice.
Designed for failure.
Every design assumes links die, power blips, and humans err — and is built to survive all three. You watched it converge above.
Vendor-honest.
We specify what the mission needs across ten ecosystems — not what a partner program incentivizes us to move.
Bring us the network that keeps you up at night.
Talk to engineering →Wireless & Mobility
Secure connectivity that moves with the mission.
Explore →Automation & Orchestration
Pipelines, drift control, and orchestration that make change boring.
Explore →Tactical & Edge Communications
Comms that hold where the infrastructure doesn't.
Explore →CHAOS — WAN Emulation
Our own T&E appliance — prove a design under impairment before production traffic does.
Explore →