marlon·paz

// about

The consultant, not the CV.

I solve the gap between what network and platform teams intend and what their fabric actually runs. For a decade across telecom, banking and critical-infrastructure networking — and now in Gulf AI data-center programs — I have built the automation that closes that gap: multivendor fabrics driven by declarative intent, multi-agent systems that turn plain language into verified change, and closed loops that repair drift instead of just reporting it. My operating rule is simple: nothing is reported done until it is proven on the device.

Consultant profile — PDF marlon.paz@ieee.org

trajectory

2024 — present
Network, Automation and Observability Architect
Core42 · Abu Dhabi, UAE · DCI and cloud networking, sovereign AI programs
2019 — 2024
IP/MPLS Network Architect
Nokia · Amadora, Portugal — DTaaS (Digital Twin as a Service), Secure ZTP, smart-grid & railway critical infrastructure
2018 — 2019
Network Consulting Engineer
Layer2 Consulting (Cisco) · Honduras
2016 — 2018
Network & Security Specialist
Citi (contract) · San Salvador
2014 — 2016
Telecommunications Engineer
Tigo (contract) · San Salvador
2009
B.Sc. Electrical Engineering
Universidad Centroamericana (UCA) · San Salvador

certifications & fluency

Every badge links to its public verification page. Full list on Credly.

certifications

  • CCIE
  • Certified Kubernetes Administrator (CKA)
  • CCNP Automation
  • CCNP Data Center
  • NVIDIA-Certified Professional: Agentic AI
  • NVIDIA AI Infrastructure and Operations
  • Nokia DCFP
  • Isovalent Lab Champion

Verified on Credly.

vendor fluency

  • Cisco (IOS-XR, NX-OS)
  • Nokia (SR Linux, SR OS)
  • Juniper
  • SONiC
  • loadbalancer.org (application delivery)
  • NVIDIA (GPU / AI infrastructure)
  • Red Hat (Ansible, RHEL)

Deliberately vendor-independent — multivendor is the offer.

working stack

Networks: IP/MPLS, SR, BGP/EVPN, VXLAN, Cisco IOS-XR and NX-OS, Nokia SR Linux and SR OS, SONiC, containerlab

Platforms: Kubernetes, Cilium/eBPF, Go operators, Python, gNMI, Prometheus, OpenTelemetry, Grafana

Agents: LangGraph, AGNTCY (A2A, SLIM), MCP, LiteLLM, Claude Code

quantum-safe networking

Hands-on, public and verifiable: Nokia ANYsec — post-quantum-resistant, line-rate encryption for data-center fabrics — plus MACsec and Nokia Network Group Encryption (NGE). The work runs in public containerlab labs on Nokia SR OS FP5 vSIMs — sros-anysec-lab andsros-anysec-macsec-lab — building on thesrl-labs originals, and was presented as a quantum-safe ANYsec demonstration at MPLS SD & AI Net World 2024 (speaker) — demo video.

In depth: how post-quantum cryptography and keying change network design and operations · line-rate encryption inside EVPN/VXLAN fabrics · performance and latency trade-offs · staged, multi-vendor migration to quantum-safe controls.

The field is applied quantum-safe networking — making fabrics resistant to quantum adversaries — not quantum-computing research itself.

publications — co-authored, peer-reviewed

Decentralized & Dynamic Zero-Touch Provisioning of Leaf-Spine EVPN Data Centers (IEEE)

Autonomous agents on each router provision the leaf-spine EVPN underlay and overlay with no manual intervention — inferring router roles from link-state topology and self-healing on link/router failures.

Kubernetes-Aware Load Balancing for Leaf-Spine EVPN Data Centers (Springer, Journal of Cloud Computing)

Distributed agents at leaf routers feed live Kubernetes pod data into the fabric, dynamically tuning ECMP weights via EVPN/BGP extended communities so routing aligns with pod placement.

Co-authored as mentor to the master's students who carried out the research.

languages & base

Based in Abu Dhabi, UAE. Working languages: English, Español, Português — covering GCC, Iberia and LATAM engagements natively.

Currently practicing at Core42; the independent practice is separate and makes no claim of company endorsement.