Enterprise network & security consulting
Senior-led firewall migrations, data center networking, routing and scheduled after-hours change execution for US MSPs and enterprise IT teams.
You have more firewall and network work than senior engineers. We take projects and overnight changes under your brand, through your ticketing and change process.
White-label · overflow · after-hours
One or two people run the whole network. When a firewall migration or data center move lands on top of the daily work, we plan and carry it with you.
Projects · second opinion · handover
You sold the hardware and the deployment. We deliver the configuration, migration and cutover so your team can keep selling.
Subcontract delivery · cutover support
Carlos Alberto Fernández Fraga
Founder and Principal Network Engineer
Carlos has worked in IT since 2007 and has spent more than ten years running multi-vendor networks for large enterprise environments. His recent work covers firewall changes, routing, load balancing and DNS across two data centers for a large international organization.
Loopback LLC was founded in 2026 to bring that level of experience to teams that need it for a project or a night, not a full-time hire.
Every engagement is led by Carlos. When a project needs more hands, such as a multi-site migration or a run of overnight windows, we bring in vetted specialist engineers from our network. They work under the same NDAs, change standards and documentation rules, and you keep a single point of contact.
| In IT since | 2007 |
|---|---|
| Enterprise networking | 10+ years |
| Environments | Multi-vendor, multi-data-center |
| Delivery model | Principal-led, with vetted specialists added as needed |
Each service has a defined output. After a short scoping call you get a fixed price and a date, so the work can be approved without a long sales process.
Lower the risk of large changes to the core of your network, with a design and plan your team can follow.
Planning and running moves between data centers, colocation and fabrics, including exits from Cisco ACI.
An outside review of the things that fail quietly until they fail loudly.
Know exactly what your firewalls allow, and move between platforms without surprises on cutover night.
A clear picture of what your firewall policy actually allows, and a safe plan to tighten it.
A documented, tested move between firewall vendors or to new hardware.
Senior capacity when you need it: planned changes, hard problems and monitoring, without a permanent hire.
Your team approves the change. We run it in your window and hand you the evidence in the morning.
Dashboards and alerts that tell you a link, tunnel or BGP session is in trouble before users do.
Our working day starts while the US is asleep, so planned overnight changes are run by rested senior engineers. Windows are booked ahead of time; we do not offer unscheduled 24/7 cover.
Examples from our principal engineer's previous engagements in enterprise and international-organization networks. Client names and identifying details are left out on purpose; we treat every environment we work in the same way.
Every engagement ends with something your team can act on and your auditors can read. Below is an example of the findings format from a firewall rule-base review. It is a format sample, not client data.
| ID | Finding | Risk | Recommended action |
|---|---|---|---|
| FW-01 | Rule allows any service from the guest network to the server VLAN | High | Confirm required services with the rule owner using traffic logs, replace with specific rules in an approved change, rollback documented |
| FW-02 | Rule is fully shadowed by a broader rule above it and never matches | Medium | Confirm intent with the rule owner, then remove through an approved change with rollback |
| FW-03 | Rule with no hits in the log period reviewed and no recorded owner | Low | Validate dependencies and owner; if approved, disable under monitoring for an agreed period with defined rollback criteria, then remove after owner sign-off |
You contract with and are invoiced by Loopback LLC, a US company. Fixed price per scope, or a day rate for ongoing work.
We sign your NDA before you share configurations or diagrams.
We connect through your VPN or jump hosts with the access you grant. Read-only first, change rights only when a change is approved.
Changes go through your tickets, approvals and maintenance windows. Every change has a written rollback.
Calls and handovers happen in the US morning, so the person who ran your overnight change is the one who briefs your team.
Configurations, diagrams and runbooks are updated and handed over at the end of each job.
Every engagement is led by our principal engineer. When the scope needs more capacity, we add vetted specialist engineers from our network. They sign the same NDAs, follow the same change and documentation standards, and report through one point of contact, so you never manage several contractors.
Yes. For MSPs and integrators we can work as part of your team, using your email domain, ticketing system and customer communication rules.
Scoping calls are usually available within a few business days. Overnight change work is scheduled once your change is approved.
Work is delivered remotely. On-site visits in the US can be arranged for cutovers or workshops when the project needs it.
Fixed-scope services get a fixed price after the scoping call. Ongoing support and overflow work are billed at a day rate or as a monthly block.
If your environment is built mainly on a platform we do not list, we will say so on the first call and, where we can, point you to someone who does.
Please don't send configurations, IP addresses or diagrams yet. We sign an NDA before any technical material is shared.
Write a few lines and we will reply with times for a call. It helps to include: