Wireless (Wi-Fi) Mobility Specialist
When NOT to Use
- Cellular RAN, 5G core, or private LTE/CBRS-only design → defer unless Wi-Fi coexistence or dual-connectivity is the question
- Carrier BGP/MPLS backbone, IX peering, or internet routing design →
network-backbone-architect
- SD-WAN overlay topology, path selection, and SASE insertion as primary deliverable →
sd-wan-engineer
- Cloud landing zone, VPC design, and managed cloud service selection →
cloud-architect
- Cloud network security guardrails, CSPM, and cloud IAM as primary deliverable →
cloud-security-engineer
- Terraform modules, physical DC build, and K8s platform delivery without WLAN design →
infrastructure-engineer
- Corporate security program, IdP, and endpoint controls without wireless architecture →
information-security-engineer
- SLO programs, on-call, and production incident process as main task →
site-reliability-engineer
- OT/ICS segmentation, Purdue model, and plant industrial wireless (ISA) →
scada-ics-cyber-security-specialist
Related skills
| Need |
Skill |
| Routed backbone, BGP/MPLS, DCI, and internet edge |
network-backbone-architect |
| SD-WAN overlay, underlay, branch breakout, and path policy |
sd-wan-engineer |
| Cloud reference architecture and hybrid connectivity |
cloud-architect |
| Implement cloud networking and managed connectivity |
cloud-engineer |
| Cloud network security controls and posture |
cloud-security-engineer |
| IaC, physical build, cabling, and platform delivery |
infrastructure-engineer |
| Enterprise security program and control catalog |
information-security-engineer |
| Reliability engineering, SLOs, and production incidents |
site-reliability-engineer |
| OT/ICS plant networks and industrial wireless context |
scada-ics-cyber-security-specialist |
Core Workflows
1. Scope, constraints, and mobility requirements
Clarify venue types, device classes, density, roaming domains, and compliance.
See references/wireless_wifi_mobility_scope.md.
2. RF survey and AP placement
Plan predictive/active surveys, coverage vs capacity, and mounting constraints.
See references/rf_survey_and_ap_planning.md.
3. Standards, channels, and capacity
Select Wi-Fi generations, band plan, channel width, power, and DFS/regulatory constraints.
See references/standards_channels_and_capacity.md.
4. Security, 802.1X, and segmentation
Design SSIDs, VLANs/VRFs, WPA-Enterprise, guest/captive portal, and RADIUS/NAC handoffs.
See references/security_8021x_and_segmentation.md.
5. Roaming, density, and performance
Optimize 802.11k/r/v, band steering, high-density RF, and sticky-client mitigation.
See references/roaming_density_and_performance.md.
6. Operations, troubleshooting, and integration
Integrate with LAN/SD-WAN edge, monitor KPIs, and troubleshoot SNR, retries, and interference.
See references/operations_troubleshooting_integration.md.
Outputs
- WLAN context — sites/venues, device mix, density tiers, and roaming expectations
- RF and AP plan — survey method, AP map, antenna/orientation notes, and capacity model
- Radio design — band/channel plan, power limits, DFS strategy, and interference mitigations
- SSID and segmentation matrix — auth method, VLAN/ACL, firewall/NAC attachment
- Roaming and density brief — 11k/r/v, band steering, min RSSI, and venue-specific tuning
- Operations baseline — controller/cloud model, monitoring KPIs, and escalation runbooks
- Integration notes — uplink to distribution, PoE budget, DHCP/DNS, and SD-WAN/local breakout hooks
Principles
- Design for mobility first — roaming domains and sticky clients drive AP density more than coverage alone
- Measure RF, do not guess — validate with survey tools and post-deploy verification walks
- Separate roles by SSID — corporate, guest, IoT, and voice each get explicit policy and VLAN paths
- Prefer 5 GHz/6 GHz for capacity — use 2.4 GHz deliberately for reach or legacy, not default overlap
- Align security with NAC — 802.1X and RADIUS are architecture decisions, not AP checkbox settings
- Document vendor-agnostic intent — capture requirements before locking controller-specific features
1---2name: wireless-wifi-mobility-specialist3description: Enterprise WLAN for mobile users—RF/site surveys, AP placement, 802.11 (Wi-Fi 5/6/6E/7), channel/power planning, SSID/VLAN segmentation, WPA3/802.1X/RADIUS, guest/captive portal, roaming (802.11k/r/v, band steering), high-density and mesh/outdoor, LAN/SD-WAN edge integration, troubleshooting (SNR, DFS, CCI). This skill should be used when the user asks about Wi-Fi, wireless mobility, WLAN design, wireless survey, AP placement, 802.11, Wi-Fi 6, Wi-Fi 6E, roaming, 802.11k, 802.11r, band steering, WPA3, 802.1X, enterprise wireless, high density Wi-Fi, channel planning, RF interference, wireless troubleshooting, Aruba, Meraki wireless, or Cisco wireless—not cellular RAN/5G core, MPLS/BGP backbone (network-backbone-architect), SD-WAN overlay (sd-wan-engineer), cloud VPC only (cloud-architect), MDM-only, or OT ISA wireless (scada-ics-cyber-security-specialist).4---56# Wireless (Wi-Fi) Mobility Specialist78## When NOT to Use910- Cellular RAN, 5G core, or private LTE/CBRS-only design → defer unless **Wi-Fi coexistence** or dual-connectivity is the question11- Carrier BGP/MPLS backbone, IX peering, or internet routing design → `network-backbone-architect`12- SD-WAN overlay topology, path selection, and SASE insertion as primary deliverable → `sd-wan-engineer`13- Cloud landing zone, VPC design, and managed cloud service selection → `cloud-architect`14- Cloud network security guardrails, CSPM, and cloud IAM as primary deliverable → `cloud-security-engineer`15- Terraform modules, physical DC build, and K8s platform delivery without WLAN design → `infrastructure-engineer`16- Corporate security program, IdP, and endpoint controls without wireless architecture → `information-security-engineer`17- SLO programs, on-call, and production incident process as main task → `site-reliability-engineer`18- OT/ICS segmentation, Purdue model, and plant industrial wireless (ISA) → `scada-ics-cyber-security-specialist`1920## Related skills2122| Need | Skill |23|---|---|24| Routed backbone, BGP/MPLS, DCI, and internet edge | `network-backbone-architect` |25| SD-WAN overlay, underlay, branch breakout, and path policy | `sd-wan-engineer` |26| Cloud reference architecture and hybrid connectivity | `cloud-architect` |27| Implement cloud networking and managed connectivity | `cloud-engineer` |28| Cloud network security controls and posture | `cloud-security-engineer` |29| IaC, physical build, cabling, and platform delivery | `infrastructure-engineer` |30| Enterprise security program and control catalog | `information-security-engineer` |31| Reliability engineering, SLOs, and production incidents | `site-reliability-engineer` |32| OT/ICS plant networks and industrial wireless context | `scada-ics-cyber-security-specialist` |3334## Core Workflows3536### 1. Scope, constraints, and mobility requirements3738Clarify venue types, device classes, density, roaming domains, and compliance.3940**See `references/wireless_wifi_mobility_scope.md`.**4142### 2. RF survey and AP placement4344Plan predictive/active surveys, coverage vs capacity, and mounting constraints.4546**See `references/rf_survey_and_ap_planning.md`.**4748### 3. Standards, channels, and capacity4950Select Wi-Fi generations, band plan, channel width, power, and DFS/regulatory constraints.5152**See `references/standards_channels_and_capacity.md`.**5354### 4. Security, 802.1X, and segmentation5556Design SSIDs, VLANs/VRFs, WPA-Enterprise, guest/captive portal, and RADIUS/NAC handoffs.5758**See `references/security_8021x_and_segmentation.md`.**5960### 5. Roaming, density, and performance6162Optimize 802.11k/r/v, band steering, high-density RF, and sticky-client mitigation.6364**See `references/roaming_density_and_performance.md`.**6566### 6. Operations, troubleshooting, and integration6768Integrate with LAN/SD-WAN edge, monitor KPIs, and troubleshoot SNR, retries, and interference.6970**See `references/operations_troubleshooting_integration.md`.**7172## Outputs7374- **WLAN context** — sites/venues, device mix, density tiers, and roaming expectations75- **RF and AP plan** — survey method, AP map, antenna/orientation notes, and capacity model76- **Radio design** — band/channel plan, power limits, DFS strategy, and interference mitigations77- **SSID and segmentation matrix** — auth method, VLAN/ACL, firewall/NAC attachment78- **Roaming and density brief** — 11k/r/v, band steering, min RSSI, and venue-specific tuning79- **Operations baseline** — controller/cloud model, monitoring KPIs, and escalation runbooks80- **Integration notes** — uplink to distribution, PoE budget, DHCP/DNS, and SD-WAN/local breakout hooks8182## Principles8384- **Design for mobility first** — roaming domains and sticky clients drive AP density more than coverage alone85- **Measure RF, do not guess** — validate with survey tools and post-deploy verification walks86- **Separate roles by SSID** — corporate, guest, IoT, and voice each get explicit policy and VLAN paths87- **Prefer 5 GHz/6 GHz for capacity** — use 2.4 GHz deliberately for reach or legacy, not default overlap88- **Align security with NAC** — 802.1X and RADIUS are architecture decisions, not AP checkbox settings89- **Document vendor-agnostic intent** — capture requirements before locking controller-specific features
daemon-blockint-tech