Identity and Entra
I make identity the control plane: Microsoft Entra ID architecture, Conditional Access at scale, and privileged access designed so the right people get the right access and nobody else does.
Problems I help solve
What I deliver
Entra ID Architecture
A clean, governable identity foundation.
- What I deliver
- A Microsoft Entra ID tenant and hybrid identity design with an authentication and passwordless strategy.
- Business outcome
- Identity becomes a control plane, not a liability.
- Microsoft Entra ID
Conditional Access at Scale
A layered, risk-based policy framework.
- What I deliver
- A layered, persona-based Conditional Access framework, tested and rolled out with break-glass cover.
- Business outcome
- Every access decision is explicit, risk-aware, and auditable.
- Conditional Access
- Entra ID P2
Privileged Access
PIM and just-in-time elevation.
- What I deliver
- A Privileged Identity Management design with just-in-time elevation, approvals, and admin role tiering.
- Business outcome
- Standing admin access removed, elevation only when needed.
- PIM
- MFA
Identity Lifecycle
Access reviews and governance.
- What I deliver
- Access review campaigns, entitlement management, and joiner-mover-leaver flows.
- Business outcome
- Permissions stay honest over time.
- Entra ID Governance
- Access Reviews
Endpoint and Device Security with Intune
Device compliance, configuration, and app protection tied to access.
- What I deliver
- Intune compliance and configuration policies and app protection, wired into Conditional Access.
- Business outcome
- Only healthy, compliant, managed devices reach corporate data.
- Microsoft Intune
- Compliance Policies
External and Guest Identity
B2B collaboration and guest governance.
- What I deliver
- External ID and B2B collaboration with guest lifecycle, access reviews, and governance.
- Business outcome
- Partners get access without becoming a risk.
- Entra External ID
Outcomes
Zero Trust identity rollouts that lifted security posture by up to 80%
50,000+ users secured across enterprise identity-first rollouts
Technology stack
- Microsoft Entra ID
- Conditional Access
- Entra ID P2
- PIM
- MFA
- Entra ID Governance
- Access Reviews
Typical deliverables
- Entra ID and hybrid identity architecture
- Conditional Access framework
- Privileged access and PIM design
- Access governance and review model
Reference architecture
Related case studies
Consolidating a fragmented Azure estate
A Gulf-region financial services group
Azure had grown across disconnected subscriptions. I designed a landing zone and migration path that brought the whole estate under one governable model.
One governable cloud estate, built on a proper landing zone
Azure PolicyAn identity-first Zero Trust uplift
A European professional services firm
Zero Trust was the goal, with no clear starting point. I led with identity and built a Conditional Access and privileged access model that cut standing risk.
Less standing access, and access decisions that are auditable
Let me turn complexity into a system you can run.
Securing a Microsoft environment, planning a migration, or getting ready for Copilot. I help you make the call with clarity, then build it to last.