Engineered in California · Delivered worldwide
Services & practice areas

The full stack, not a slide deck.

We work where your network actually lives: in the rack, on the tower, in the config. Every engagement covers design, configuration, validation, and documentation your next engineer can follow.

Packages

Four ways to start. Or build your own.

Defined scope, defined deliverable, price agreed in writing. If you don’t see a package that fits, ask for a custom engagement.

Package · Start here

PROVE

Turn-up & acceptance testing

Prove a new or upgraded circuit delivers what you paid for before you accept it or put traffic on it.

  • Test plan written against the service agreement
  • RFC 2544: throughput, latency, frame loss, back-to-back
  • ITU-T Y.1564 service activation testing per service class
  • One-side-at-a-time loopback isolation when results are off
  • Plain-language pass/fail report with the raw results

Short engagement · Fixed fee per circuit

Ask about PROVE
Package

MOVE

Migration & cutover

Router refreshes, capacity upgrades, IP-over-DWDM moves and vendor migrations, planned with a way back.

  • Pre-cutover baselines: protocol, service, optical and QoS state
  • Method of procedure with go/no-go criteria and rollback
  • Maintenance-window execution, remote
  • Post-cutover validation and turn-up testing
  • Every device confirmed in monitoring; as-builts delivered

Typically 2–8 weeks · Fixed fee, written scope

Ask about MOVE
Package

PROTECT

Owner’s engineer

An independent, experienced engineer on your side of the table while a vendor or integrator does the build.

  • Design review before anything is bought or built
  • Bill of materials, optics and proposal review
  • Acceptance tests witnessed remotely on your behalf
  • Written sign-off, or a punch list before payment

A few hours a week · Per phase or monthly

Ask about PROTECT
Package

KEEP

Fractional network engineer

Experienced engineering every month without a full-time hire. Escalations, change reviews and documentation that stays with you.

  • Monthly engineering hours: 10, 20 or 40
  • Escalation support across fiber, optical, IP/MPLS, RF and voice
  • Change reviews and standby for major maintenance windows
  • One undocumented area written down each month
  • Quarterly written network health and roadmap review

Monthly retainer · 6-month minimum

Ask about KEEP
Custom

CUSTOM

Don’t see what you need?

The packages are starting points, not limits. Bring the problem and we’ll scope a custom engagement around it: an architecture review, a one-off migration, RFP support, RF or microwave work, a voice or legacy switch cleanup, an automation project, or something not listed here.

Scoped to fit · Fixed fee or time & materials

Ask for a custom scope
Practice areas

Six disciplines in depth.

Ordered by current demand. For every individual capability, see the capabilities index.

01Service Provider & Transport

Carrier-class IP/MPLS routing & optical transport.

Nokia 7250 IXR, 7705 SAR and 7750 SR are home turf. Production SR OS work: IS-IS and OSPF as the IGP, BGP for inter-AS and route reflection, LDP, MPLS L2 and L3 VPNs, VPLS and epipes, EVPN, QoS scheduling, BFD, and IPv4/IPv6 services. Code upgrades with full pre/post checks and rollback readiness.

Ciena packet-optical and coherent DWDM transport, IP-over-DWDM where the network needs the bandwidth, and microwave and dark-fiber backhaul upgrades. Every circuit proven with RFC 2544 and Y.1564 before it carries traffic. Cisco IOS-XR and Juniper MX welcome; multi-vendor networks are normal work for us.

  • IS-IS / OSPF IGP design
  • BGP route reflection & policy
  • SR OS service builds
  • EVPN deployments
  • SR-MPLS rollouts
  • Coherent optical transport
  • IP-over-DWDM
  • RFC 2544 / Y.1564 turn-up
  • Code upgrades & back-out plans
  • Production cutover
  • Backhaul capacity upgrades
  • QoS scheduler & egress tuning
  • Nokia to Ciena 5164 migrations
  • LEC NNI VLAN testing
BGPIS-ISOSPFOSPFv3LDPBFDVPLSVPRNEpipeLAGQoSIPv4 / IPv6Nokia 7250 IXR-e/sNokia 7705 SARNokia 7750 SRSR OS / TiMOSSR LinuxCiena 5164Ciena 6500Ciena One ControlCisco IOS-XRJuniper MXDWDMOTNRFC 2544Y.1564
02RF, 5G & Mobile

Radio engineering, from the tower to the baseband.

Link budgets calculated against real terrain, path engineering that survives the rain-fade season, and antenna work that accounts for polarization and interference. RF engineering for licensed microwave, unlicensed and millimeter-wave links, coordinated through FCC ULS.

For mobile networks: Ericsson UTRAN, CRAN and 5G baseband integration, 4G LTE and 5G NR, C-Band and CBRS capacity turn-ups, and RAN reachability troubleshooting from the eNodeB to the core.

  • Microwave path engineering
  • Link budget & availability analysis
  • Fresnel-zone clearance studies
  • FCC ULS coordination & licensing
  • Interference investigation
  • Antenna alignment & polarization
  • In-building DAS design
  • UTRAN / CRAN integration
  • 4G / 5G RAN turn-up
  • C-Band & CBRS capacity
  • DUS-41 to 6648 swaps
  • eNodeB-to-MME troubleshooting
  • RF site surveys
  • Wi-Fi 6 / 6E design
Ericsson UTRANEricsson 6630 / 6648AMOS / ENM4G LTE5G NR5G NSAC-Band850 MHzCBRSMicrowaveE-BandmmWaveDASFCC ULSXPICWi-Fi 6/6E
03Design & Engineering

Network architecture & engineering.

Topology that scales the way your business does. We design for redundancy at the layers that matter, capacity where it’s needed, and operational sanity at every interface, informed by years of operating the networks other people designed.

Greenfield builds, data center interconnect, WAN consolidation and vendor migration. Drawn before it’s deployed, validated before it’s promoted.

  • HLD / LLD documents
  • IP & routing plans
  • Capacity models
  • Migration runbooks
  • Failure-mode analysis
  • Validation test plans
BGPOSPFIS-ISMPLSSR/SR-MPLSEVPNVXLANQoS
04Automation, Orchestration & Linux

Linux underneath. Scripts in the middle. Orchestration on top.

Linux is the foundation, in production since 1998: servers, containers, network tooling and bastion hosts, reproducible and documented.

Python and Bash are the working languages: production tooling, monitoring integrations such as SevOne, NETCONF and RESTCONF clients, parsing, and the sed, awk and jq pipelines that turn a raw dump into something an engineer can review. Ansible for repeatable configuration, NETCONF and YANG for model-driven change.

At the orchestration layer: Nokia NSP for SR OS software upgrades, service operations and monitoring, and Ciena Blue Planet for multi-domain packet-optical orchestration.

  • Linux server engineering & hardening
  • Python automation tooling
  • Bash / shell scripting & ops glue
  • Ansible playbooks & roles
  • Pre/post-change check automation
  • Nokia NSP operations
  • Ciena Blue Planet
  • NETCONF / RESTCONF / gNMI
  • Monitoring integration
  • Custom CLI & REST tooling
LinuxPythonBashAnsibleAWXDockerNokia NSPSevOneSNMPv3Ciena Blue PlanetNETCONFYANGgNMIGitjq · sed · awk
05Routing & Security

Routing, firewalls, segmentation.

Edges that hold. Routed and firewalled boundaries on pfSense and enterprise platforms, with policies that audit cleanly, VPNs that stand up to scrutiny, and segmentation that keeps a problem in one place.

On the carrier side: SNMPv3-hardened management, vulnerability patching on production routing gear, and compliance auditing to Telcordia standards.

  • pfSense / OPNsense builds
  • Enterprise firewall policy
  • Site-to-site & remote VPN
  • Network segmentation
  • Management-plane hardening
  • Compliance audits
  • SeGW & MLS failover testing
  • Vulnerability patching
pfSenseIPsecWireGuardSSL VPNVLANsVRFsACLsSNMPv3SeGWFailover testing
06Voice & Legacy Switching

VoIP, SIP, open-source PBX, and the legacy that pays the bills.

FreePBX and Asterisk for organizations that want a flexible voice platform without enterprise licensing. Sonus SBC and SIP trunking for the carrier voice plane.

And when nobody else will touch it: Lucent 5ESS and Nortel DMS-100 support, SS7 link health and trace analysis, and orderly migration to IP. We’ve maintained these switches in production, from RCC clusters and OMP backups to clearing alarms at the console.

  • FreePBX deployments
  • Asterisk dial plans & integration
  • Sonus SBC configuration
  • SIP trunk delivery
  • DMS-100 / 5ESS support
  • SS7 trace analysis
  • TDM-to-IP migration
  • Number translation & routing
FreePBXAsteriskPJSIPSonusSIPNortel DMS-100Lucent 5ESSOMP / TICLISS7RTP / SRTP
Engagement models

Three ways to bring Subiaco in.

Architect

Strategic consulting

Design reviews, vendor evaluation, RFP support and technology roadmaps. Experienced advice for the decisions you live with for a decade.

Build

Project delivery

Scoped engagements such as MOVE and PROVE, or custom builds, migrations and automation rollouts. The engineer who designs it stays through cutover.

Operate

Retainer & on-call

KEEP: monthly engineering, escalation support, change windows, and the second set of eyes worth having on a Sunday-night maintenance.

Common questions

What clients ask before engaging.

How do you charge?

Packages and project work are fixed-fee against a written scope. Strategic consults can be time and materials at a single hourly rate. Retainers are monthly with defined hour tiers. Pricing is shared after a scoping conversation.

What if no package fits?

Ask for a custom engagement. Describe the problem and we’ll scope the work around it, whether that’s a single design review, an RF study, a voice migration or a multi-month project.

Where do you work?

We’re based in California and deliver every engagement remotely, for clients worldwide. Field work on site is done by your teams or contractors, with us on the bridge.

How soon can you start?

Scoping typically happens within a week of your inquiry. Start dates depend on current load, and you’ll hear about availability up front.

Do you sign NDAs?

Yes. Mutual NDAs are routine and signed before any detailed scoping. We can work from your template or provide one.

Can you work with our procurement process?

Yes. We can work under your MSA and inside your change-management, access and security policies, or from our standard agreement. W-9s and supplier-registration paperwork are routine, and NDAs come first.

What happens if our engineer is unavailable?

Every engagement is built so you’re never dependent on one person’s memory: baselines, methods of procedure, as-builts and runbooks live with your team from day one, and any competent engineer can pick them up. That isn’t a disclaimer; it’s the operating principle.

Will you provide references?

Professional references are available to qualified prospects after an initial scoping call.

Ready to start?

Tell us what you’re working on.

One inquiry, no sales funnel. A package, a custom scope, or an honest referral if someone else is the better fit.

Request a scope