H

[admin@heng] > establishing uplink▌

STATUS: CONNECTED

[admin@heng] > show identity

Hi, I'm
Somkiat Saksasichai

I build

Network Engineer & Consultant from Bangkok. I design efficient, secure, and scalable network systems — from enterprise routing to wireless roaming, firewalls, and VPNs.

About Me Get in Touch
0
YEARS EXP
0+
PROJECTS
0
TECH STACKS
Somkiat Saksasichai
Network Engineer
SCROLL

// 01 — PROFILE

About Me

Somkiat

I'm Somkiat Saksasichai

— but friends call me "Heng"

Network Engineer & Consultant

I'm a Network Engineer and Consultant with 41+ vendor certifications across MikroTik, Fortinet, Cisco, and Palo Alto Networks. I specialize in SD-WAN, enterprise wireless, VPN, and secure network design — backed by a Bachelor's in IT and an MBA from Rangsit University (RSU).

My technical expertise spans the full network stack — foundational architecture, SD-WAN, load balancing & failover, enterprise wireless (fast roaming, WPA2/WPA3 Enterprise with 802.1X), centralized AAA via RADIUS, captive-portal hotspots, bandwidth shaping (Queue/PCQ/QoS), firewalls & IPS, VPN tunnels across all major protocols (IPsec, IKEv2, WireGuard, OpenVPN, SSTP, L2TP, EOIP, GRE), and IP surveillance.

Backed by 41+ vendor certifications across MikroTik, Fortinet, Cisco, D-Link, CompTIA, Palo Alto Networks, Ubiquiti, TP-Link, and Microsoft.

PHONE

096 659 1951

LINE ID

heng.h

// 02 — BRANDS

Brand Expertise

Hands-on experience with leading enterprise network & security brands.

FortinetFortinet
CiscoCisco
HPE ArubaHPE Aruba
MikroTikMikroTik
TP-LinkTP-Link
RuckusRuckus
DellDell
SynologySynology
HikvisionHikvision
DahuaDahua
YealinkYealink
YeastarYeastar

// VERIFIED

Certifications

Vendor-certified across networking, security, and infrastructure — earned through hands-on training and exams.

MikroTik

8 CERTIFICATIONS

MTCNA MTCRE MTCWE MTCSE MTCUME MTCINE MTCTCE Consultant

Fortinet

4 CERTIFICATIONS

FortiGate NSE 7.4 NSE 7.6 ISC2 CPE

D-Link

3 CERTIFICATIONS

DCNA DCNP M2M DCNP Switching

TP-Link

2 CERTIFICATIONS

OCNA VIGI Surveillance

Cisco

1 CERTIFICATION

Network Technician Career Path

Palo Alto Networks

1 CERTIFICATION

Network Monster

Ubiquiti

1 CERTIFICATION

UEWA

CompTIA

4 CERTIFICATIONS

A+ Network+ IT Fundamentals Project+

Microsoft

2 CERTIFICATIONS

Computer Networking Networking Fundamentals

Specialized Training

7 ADDITIONAL CERTIFICATIONS

PON / FTTX / FTTR / VOIP DSD Basic Cybersecurity DSD Basic Network ITPE n8n Automation IT Audit QA & Traceability
41+ vendor certifications & specialized trainings

// 03 — HARD SKILLS

Technical Expertise

Hands-on across networks and infrastructure — design, wireless, security, VPN, bandwidth, surveillance, backup, and storage.

Network Design & Architecture

Plan and architect resilient enterprise networks — segmentation, dynamic routing, and redundancy from the ground up.

  • Topology & capacity planning
  • VLAN / Inter-VLAN routing
  • Dynamic routing & HA design

SD-WAN

Software-defined wide-area networking — intelligent traffic steering across multiple links with centralized policy and visibility.

  • Multi-link orchestration
  • Application-aware routing
  • Centralized policy management

Load Balancing & Failover

Distribute traffic across multiple links and gateways for performance and resilience — seamless failover when one path drops.

  • Multi-WAN aggregation
  • Per-session load balancing
  • Active / passive failover

Wireless Solutions

Seamless WiFi infrastructure with fast roaming — clients move between access points without dropped connections, ideal for campuses, hotels, and large offices.

  • 802.11k / v / r fast roaming
  • PtP & PtMP wireless links
  • Site survey & coverage tuning

WPA2/WPA3 Enterprise

Enterprise-grade wireless authentication via 802.1X — per-user credentials and certificate-based access for corporate WiFi.

  • 802.1X with EAP-PEAP / EAP-TLS
  • Certificate-based authentication
  • Integration with AD / LDAP / RADIUS

RADIUS Server

Centralized AAA (Authentication, Authorization, Accounting) — single source of truth for credentials across switches, WiFi, VPN, and PPPoE.

  • User Manager / FreeRADIUS
  • AAA for VPN / PPPoE / Hotspot
  • 802.1X for switches & WiFi

Hotspot Captive Portal

Branded captive-portal sign-in for guest networks — voucher generation, custom login pages, and walled-garden access for cafes, hotels, and public venues.

  • Custom branded login pages
  • Voucher & PIN code system
  • Walled-garden pre-auth pages

Bandwidth Management

Per-user and per-session bandwidth control — queues, QoS, and traffic shaping to prioritize critical apps and prevent congestion.

  • Queue tree / Simple queues
  • PCQ per-user fair-share
  • Traffic prioritization (DSCP / QoS)

Firewall & Security

Defense-in-depth security with enterprise firewalls — policy design, threat protection, and traffic inspection without sacrificing performance.

  • Fortinet / MikroTik firewalls
  • Policy & rule optimization
  • IPS / web filtering / SSL inspection

VPN & Remote Access

Secure site-to-site and remote-user connectivity across all major VPN protocols — keeping branch offices and field teams reliably connected.

  • IPsec / IKEv2 / OpenVPN
  • WireGuard / SSTP (SSL VPN)
  • L2TP / PPTP / EOIP / GRE

CCTV & Surveillance

IP-camera surveillance systems integrated with the network — Hikvision and Dahua deployments with NVR storage and remote viewing.

  • IP camera deployment
  • NVR & storage planning
  • Secure remote viewing

Backup Solutions

Reliable backup strategy across VMs, file servers, and cloud — protect business data with scheduled snapshots, off-site replication, and tested recovery.

  • VM backup & snapshots
  • File server snapshot & versioning
  • Off-site sync to cloud storage

NAS & File Server HA

Centralized network storage with high availability — NAS clusters, redundant file-server architecture, and seamless failover to keep shared data always accessible.

  • NAS deployment & tuning
  • HA cluster & failover
  • SMB / NFS file shares

Cloudflare & DNS

Edge security and performance via Cloudflare — DNS management, SSL/TLS termination, WAF rules, caching, and DDoS protection at the edge.

  • DNS records & domain management
  • SSL/TLS & HTTPS enforcement
  • WAF, caching & CDN

Server Hardening & Monitoring

Proactive defense and observability — fail2ban for brute-force protection, log analysis with retention policies, and SSH hardening for secure access.

  • fail2ban & intrusion prevention
  • Log analysis & retention
  • SSH hardening & access control

Network Monitoring

Real-time visibility into network health and traffic — SNMP polling, NetFlow analytics, uptime alerts, and dashboards to spot issues before users do.

  • SNMP / NetFlow / sFlow monitoring
  • Bandwidth & latency analytics
  • Uptime alerts & dashboards

// 04 — ACADEMIC

My Education

Bachelor RSU
BACHELOR · 2012 — 2016

Bachelor of Science in Information Technology

Rangsit University (RSU)

First Class Honors Completed
MBA RSU
MASTER · 2020 — 2021

Master of Business Administration (MBA)

Rangsit University (RSU)

First Class Honors Completed

// 05 — CAREER PATH

Work Experience

2007 — 2016

JSB Service Company Limited

IT Support — Maintenance Hardware / Software

Part-Time

2012 — 2016

ICT — Rangsit University

Network Administrator

Worked while studying

2014

Adecco Recruitment (Thailand) Co., Ltd.

IT Admin

Contract worker

2015 — 2016

MikroTik (Thailand) Co., Ltd.

Network Engineer · IT Supervisor

  • Network design
  • Trainer assistant
2016 — Present

VRProService Company Limited

Managing Director · Co-Founder

Currently active

// 06 — REACH OUT

Get in Touch

Have a network project in mind? Let's design something solid together.

PHONE

096 659 1951

Call now

EMAIL

somkiat.md5@gmail.com

Send email

LINE

heng.h

Open chat

LOCATION

Bangkok, TH

View map

// READY?

Let's design your network.

From quick fixes to full enterprise rollouts — give me a ring and we'll talk specs over cocoa

Call Now Chat on Line