# Wireless Wifi Mobility Specialist

> Enterprise WLAN for mobile users—RF/site surveys, AP placement, 802.11 (Wi-Fi 5/6/6E/7), channel/power planning, SSID/VLAN segmentation, WPA3/802.1X/RADIUS, guest/captive portal, roaming (802.11k/r/v, band steering), high-density and mesh/outdoor, LAN/SD-WAN edge integration, troubleshooting (SNR, DFS, CCI). This skill should be used when the user asks about Wi-Fi, wireless mobility, WLAN design, wireless survey, AP placement, 802.11, Wi-Fi 6, Wi-Fi 6E, roaming, 802.11k, 802.11r, band steering, WPA3, 802.1X, enterprise wireless, high density Wi-Fi, channel planning, RF interference, wireless troubleshooting, Aruba, Meraki wireless, or Cisco wireless—not cellular RAN/5G core, MPLS/BGP backbone (network-backbone-architect), SD-WAN overlay (sd-wan-engineer), cloud VPC only (cloud-architect), MDM-only, or OT ISA wireless (scada-ics-cyber-security-specialist).

- Skill: `daemon-blockint-tech/wireless-wifi-mobility-specialist` (Agent Skill, multi-file: 7 files)
- Install (CLI): `npx skillmds@latest add daemon-blockint-tech/wireless-wifi-mobility-specialist`
- Raw SKILL.md: https://api.skillmd.com/api/skills/daemon-blockint-tech/wireless-wifi-mobility-specialist/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: daemon-blockint-tech (https://skillmd.com/u/daemon-blockint-tech)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/daemon-blockint-tech/wireless-wifi-mobility-specialist

---


# Wireless (Wi-Fi) Mobility Specialist

## When NOT to Use

- Cellular RAN, 5G core, or private LTE/CBRS-only design → defer unless **Wi-Fi coexistence** or dual-connectivity is the question
- Carrier BGP/MPLS backbone, IX peering, or internet routing design → `network-backbone-architect`
- SD-WAN overlay topology, path selection, and SASE insertion as primary deliverable → `sd-wan-engineer`
- Cloud landing zone, VPC design, and managed cloud service selection → `cloud-architect`
- Cloud network security guardrails, CSPM, and cloud IAM as primary deliverable → `cloud-security-engineer`
- Terraform modules, physical DC build, and K8s platform delivery without WLAN design → `infrastructure-engineer`
- Corporate security program, IdP, and endpoint controls without wireless architecture → `information-security-engineer`
- SLO programs, on-call, and production incident process as main task → `site-reliability-engineer`
- OT/ICS segmentation, Purdue model, and plant industrial wireless (ISA) → `scada-ics-cyber-security-specialist`

## Related skills

| Need | Skill |
|---|---|
| Routed backbone, BGP/MPLS, DCI, and internet edge | `network-backbone-architect` |
| SD-WAN overlay, underlay, branch breakout, and path policy | `sd-wan-engineer` |
| Cloud reference architecture and hybrid connectivity | `cloud-architect` |
| Implement cloud networking and managed connectivity | `cloud-engineer` |
| Cloud network security controls and posture | `cloud-security-engineer` |
| IaC, physical build, cabling, and platform delivery | `infrastructure-engineer` |
| Enterprise security program and control catalog | `information-security-engineer` |
| Reliability engineering, SLOs, and production incidents | `site-reliability-engineer` |
| OT/ICS plant networks and industrial wireless context | `scada-ics-cyber-security-specialist` |

## Core Workflows

### 1. Scope, constraints, and mobility requirements

Clarify venue types, device classes, density, roaming domains, and compliance.

**See `references/wireless_wifi_mobility_scope.md`.**

### 2. RF survey and AP placement

Plan predictive/active surveys, coverage vs capacity, and mounting constraints.

**See `references/rf_survey_and_ap_planning.md`.**

### 3. Standards, channels, and capacity

Select Wi-Fi generations, band plan, channel width, power, and DFS/regulatory constraints.

**See `references/standards_channels_and_capacity.md`.**

### 4. Security, 802.1X, and segmentation

Design SSIDs, VLANs/VRFs, WPA-Enterprise, guest/captive portal, and RADIUS/NAC handoffs.

**See `references/security_8021x_and_segmentation.md`.**

### 5. Roaming, density, and performance

Optimize 802.11k/r/v, band steering, high-density RF, and sticky-client mitigation.

**See `references/roaming_density_and_performance.md`.**

### 6. Operations, troubleshooting, and integration

Integrate with LAN/SD-WAN edge, monitor KPIs, and troubleshoot SNR, retries, and interference.

**See `references/operations_troubleshooting_integration.md`.**

## Outputs

- **WLAN context** — sites/venues, device mix, density tiers, and roaming expectations
- **RF and AP plan** — survey method, AP map, antenna/orientation notes, and capacity model
- **Radio design** — band/channel plan, power limits, DFS strategy, and interference mitigations
- **SSID and segmentation matrix** — auth method, VLAN/ACL, firewall/NAC attachment
- **Roaming and density brief** — 11k/r/v, band steering, min RSSI, and venue-specific tuning
- **Operations baseline** — controller/cloud model, monitoring KPIs, and escalation runbooks
- **Integration notes** — uplink to distribution, PoE budget, DHCP/DNS, and SD-WAN/local breakout hooks

## Principles

- **Design for mobility first** — roaming domains and sticky clients drive AP density more than coverage alone
- **Measure RF, do not guess** — validate with survey tools and post-deploy verification walks
- **Separate roles by SSID** — corporate, guest, IoT, and voice each get explicit policy and VLAN paths
- **Prefer 5 GHz/6 GHz for capacity** — use 2.4 GHz deliberately for reach or legacy, not default overlap
- **Align security with NAC** — 802.1X and RADIUS are architecture decisions, not AP checkbox settings
- **Document vendor-agnostic intent** — capture requirements before locking controller-specific features