Microsoft Entra and Microsoft 365 consulting for teams that need a specialist in the room.

A structured review of your Microsoft Entra tenant with a written findings report.

Two-week engagement. I audit Conditional Access, PIM configuration, authentication methods, sign-in log signals, guest and B2B posture, and hybrid identity health. You get a written report with prioritised findings, risk ratings, and a remediation roadmap you can execute against.

Fit: You know your Entra posture drifted somewhere over the last few years and you want an outside view before something breaks.

Design and implement a full Conditional Access policy set from scratch or from a legacy configuration.

Four to eight week project depending on tenant size. Covers policy design, ring-based rollout planning, phishing-resistant Authentication Strengths, break-glass account hardening, and monitoring. Includes documentation and a runbook for future changes.

Fit: You're on per-user MFA or Security Defaults and need to move to a proper Conditional Access model without locking anyone out.

PIM, Entitlement Management, Access Reviews, and Access Packages deployed as a working system.

Six to twelve week project depending on the number of roles, resources, and stakeholder teams. Covers PIM configuration for privileged roles, Entitlement Management catalog and access package design, Access Review scheduling, and monitoring KQL for each.

Fit: You have Entra ID Governance licenses and haven't operationalised them yet, or the initial rollout stalled.

Hourly help for specific incidents your team can't crack.

Same-day availability for active incidents. Common shapes: unexplained Conditional Access blocks, sign-in log forensics, PRT and token issues, hybrid identity replication failures, mail flow authentication problems, unexpected policy behaviour after a Microsoft change.

Fit: You have a ticket that's been open for two weeks and nobody on your team has time to dig into it properly.

A monthly retainer for teams that want ongoing access without one-off engagements.

Monthly retainer with a defined block of hours. Use them for architecture questions, design reviews, quarterly tenant health checks, or on-demand access when Microsoft ships something new that affects your environment. Unused hours don't roll over; predictable spend.

Fit: You have an internal team that can execute but wants a specialist to talk through architecture decisions and validate designs.