Cameron Munroe
IT Systems Analyst — infrastructure, networks, and web development
Paso Robles, California
About
Systems Analyst with over a decade and counting of experience managing enterprise infrastructure. During the day I handle network architecture, firewalls, and server operations. Outside of work I run a personal K3s cluster and build web services.
Role in Practice
My title is "Systems Analyst," but the day-to-day scope — ownership, decision-making, and the systems I'm accountable for — maps more closely to several senior engineering tracks:
- Senior Systems Engineer (Infrastructure & Endpoint)
- IT Infrastructure & Security Engineer (Senior)
- Senior Network & Endpoint Security Engineer
- Senior Endpoint / Modern Workplace Engineer (Intune-focused)
- Senior Zscaler (SSE) Administrator / Engineer
Experience
- IT consulting and contracting for local businesses — clients include Adelaida Winery
Deeper Dives
Topic spotlights that expand on work crossing multiple roles — vendor stacks I've owned end-to-end and platform disciplines I've built out.
Zero Trust / SSE
- Deployed Zscaler ZIA and ZPA commercial across an entire organization.
- Set up SSL inspection policies.
- Built out a zero-trust network leveraging ZPA.
- Regularly maintain policies and rules.
- Tuned configuration to deliver up to 10× performance for specific clients.
Hypervisors
- Manage small Proxmox VE clusters in production.
- Run KVM as the primary virtualization layer.
- Use live migration to move workloads between nodes without downtime.
- Operate Proxmox Backup Server for incremental backups and retention.
- Configure highly available VMs with automatic failover across nodes.
- Manage small vCenter environments end-to-end.
- Handle VM migration and backup across hosts and datastores.
- Stand up clusters from zero — host install through fully managed configuration.
- Configure iSCSI shared storage with HA for resilient VM placement.
Firewalls
- Manage pfSense firewall appliances end-to-end.
- Configure VLANs and inter-VLAN access controls.
- Author and maintain firewall rule sets across LAN, WAN, and DMZ zones.
- Operate IDS policies for inline traffic inspection.
- Build and maintain site-to-site VPN tunnels between locations.
- Run BGP-based routing over IKEv2/IPsec and WireGuard for dynamic multi-site reachability.
- Manage WatchGuard Firebox appliances end-to-end.
- Configure VLANs and inter-VLAN access controls.
- Author and maintain firewall rule sets.
- Tune IDS / IPS policies for production traffic.
- Deploy and maintain site-to-site VPN tunnels between offices.
- Manage Cisco Meraki MX security appliances through the Meraki Dashboard.
- Configure VLANs and group-based firewall policies.
- Author and maintain firewall rule sets.
- Operate IDS / IPS policies on Meraki MX.
Networking
- Operate UniFi gateways with firewall and routing rule sets.
- Manage UniFi switches and VLAN segmentation.
- Deploy and tune UniFi Wi-Fi access points across multi-AP sites.
- Run firewall, switching, and wireless from a single pane of glass via the UniFi Network Application.
- Manage Aruba access points and wireless controllers.
- Configure SSIDs and enterprise authentication.
- Tune RF and channel plans for site coverage.
- Manage Cisco Catalyst switches in the IOS / IOS-XE family.
- Configure VLANs and trunk ports.
Windows Infrastructure
- Stand up and operate Active Directory domains, including replication and FSMO role placement.
- Provision users, groups, and organizational units across the directory.
- Configure NPS / RADIUS for 802.1X and VPN authentication.
- Manage DHCP scopes and reservations.
- Run authoritative DNS for internal infrastructure.
Skills
Infrastructure
Networking & Security
Containers & Orchestration
Development
Projects
I build and self-host web services on my personal cluster. See the portfolio for details — highlights include an IP intelligence API that handled 3 billion requests in a single month, and a real estate platform with live MLS listing data.



