SmallNet LLC delivers senior-level IT consulting directly — no account managers, no junior teams, no hand-offs. From network ground-up to security advisory to full facility technology buildouts.
What SmallNet Does
Project-based engagements with the principal doing the work. No subcontracting the critical path to someone you haven't met.
Full-scope technology systems for new and renovated commercial facilities — from pre-construction planning through commissioning. Network and MDF design, structured cabling, Wi-Fi coverage, IP surveillance, access control, audio/PA, and video recording infrastructure. Includes GC coordination, low-voltage drawings, and execution documentation for EOR and permitting.
Ground-up network design and deployment for small businesses — healthcare, professional services, light commercial. Ubiquiti as the SMB standard; enterprise-grade platforms where scope demands. Site surveys, hardware selection, installation oversight, and complete handoff documentation.
CISSP-led security posture assessments, policy development, and compliance alignment — NIST CSF, CIS Controls, HIPAA-adjacent environments. Vendor evaluation, architecture review, and practical remediation roadmaps for organizations without a dedicated security function.
Azure infrastructure design, Entra ID and Intune deployment, Defender configuration, Teams Voice and UC rollout, and M365 tenant optimization. Designed for organizations migrating off on-premises systems or rationalizing cloud spend and licensing complexity.
Practical AI adoption advisory for SMBs — use case identification, tooling evaluation (Microsoft Copilot, Claude, automation platforms), and workflow integration. No hype; a grounded assessment of what actually moves the needle for your operation and what's ready to deploy today.
Vendor-neutral technology planning — scoping, RFP/SOW development, vendor selection, cost modeling, and procurement coordination. Especially valuable for organizations entering a major technology investment without in-house expertise to evaluate competing options and proposals.
Post-deployment support and managed services for existing SmallNet clients — monitoring, incident response, change management, and periodic infrastructure review. Relationship-based engagement; not a ticket queue. You get continuity with the same person who built it.
Senior security leadership on a part-time or retainer basis for organizations that need a CISO-level function without a full-time hire. CISSP-credentialed, covering security program ownership, board and executive reporting, policy governance, third-party risk, and incident response leadership. Especially suited to organizations facing compliance obligations, cyber insurance requirements, or board-level security scrutiny.
Technology strategy and executive leadership for growing organizations that need a CTO voice without the full-time overhead. Covers technology roadmap development, vendor and platform decisions, team structure and hiring guidance, and translating business objectives into actionable infrastructure strategy. Engages at the leadership level — board presentations, investor due diligence, and cross-functional alignment included.
The Engagement Model
Three steps. No hand-offs. The same person from discovery to handoff.
A 30-minute call to understand your environment, goals, and constraints. No sales pitch — a straight technical conversation to figure out if and how SmallNet can help.
A clear scope of work with defined deliverables, timeline, and fixed or structured pricing. You know exactly what you're getting before anything starts.
Principal-led delivery from kickoff to handoff. One person. Full accountability. You get documentation, institutional knowledge, and continuity — not a ticket number.
Principal Consultant
SmallNet LLC is a boutique IT consulting practice operated by Dave Small — a CISSP and CCNA-certified engineer with over 20 years of enterprise infrastructure experience. Dave has designed and deployed networks across more than 20 international sites, managed BGP and SD-WAN architectures, and led cloud migrations for organizations ranging from regional businesses to international operations.
SmallNet exists because most small and mid-sized organizations can't justify a full-time senior network or security architect, but they still have the same infrastructure problems. The practice delivers enterprise-grade thinking applied at the right scale — without the overhead, the hand-offs, or the account management layer.
Every engagement is principal-led. Dave does the work directly. Clients get a practitioner who has architected the same problems at enterprise scale, applied to their specific environment and budget.
Representative Engagements
Engagement summaries by scope and sector. Client names are not published by policy.
Problem: New facility had no technology infrastructure plan and a GC timeline that wouldn't wait for a late-stage scope addition.
Full technology infrastructure scope for a new multi-building athletic training facility — pre-construction coordination with the GC and EOR, MDF and IDF design, structured cabling backbone, distributed Wi-Fi with RF modeling, IP surveillance across 30+ camera positions, access control at all entry points, and PA/intercom integration. Delivered low-voltage permit drawings, commissioning documentation, and post-occupancy punch-through support.
Problem: Practice running on a consumer router with no VLAN segmentation — HIPAA exposure on a live clinical network.
Ground-up network design and deployment for a multi-operatory dental practice — clinical and administrative VLAN segmentation, HIPAA-aligned network architecture, Ubiquiti switching and wireless, and firewall policy tuned for digital imaging and practice management software. Delivered full as-built documentation and staff walkthrough. Practice moved from a consumer router to a production-grade infrastructure with zero downtime during transition.
Problem: No security function, no visibility, and an upcoming cyber insurance renewal requiring documented controls.
CISSP-led posture assessment for a regional professional services firm operating without a dedicated security function. Assessed against NIST CSF, identified critical gaps in endpoint management, network segmentation, and access control. Delivered a prioritized remediation roadmap with vendor-neutral recommendations and helped the client evaluate and select an MDR provider. Engagement included policy development for acceptable use and incident response.
Problem: Aging on-premises Exchange forcing the issue, with no in-house expertise to plan or execute a migration without disrupting operations.
Planned and executed a full migration from on-premises Exchange and file server infrastructure to Microsoft 365 for a regional nonprofit organization. Scope included Entra ID tenant configuration, Intune device enrollment for Windows and mobile endpoints, Defender for Business deployment, Teams rollout with voice (Calling Plan), and SharePoint migration from legacy file shares. Post-migration included 90-day stabilization support and end-user training coordination.
Client Feedback
"Dave rebuilt our entire network in two days with zero downtime. He explained every decision in plain language, left us with documentation we can actually use, and was reachable long after the project closed. We've never had infrastructure this clean."
"We needed someone who could walk into a board meeting and explain our security posture, then go implement the fixes himself. Dave did exactly that. The clarity he brought to our NIST assessment was worth more than what we paid."
"Coordinating low-voltage through a live construction schedule is brutal. Dave was in the field, on calls with the GC, and delivering drawings to the EOR — simultaneously. The system he designed still runs without a single issue."
Get in Touch
SmallNet takes on a limited number of active engagements to maintain quality and personal involvement in every project. If you're evaluating an infrastructure project, a security assessment, or need senior-level technical input on a procurement decision — reach out directly.
No intake forms, no sales process. A direct conversation with the person who will do the work.
