Services
I work project by project. Every engagement is different — a different environment, a different risk picture, a different definition of "done" — so I don't publish a price list or a menu of packages. What I offer instead is a clear, repeatable way of working that takes a problem from "we think we have an issue" to "this is built, documented, and we own it."
The lens is always the same one I bring to everything: security and governance first, but proportionate to the real risk and the size of the organisation. The work runs through four stages.
Scoping
Before any solution gets designed, I want to understand the environment, the constraints, and what success actually looks like for you. That means mapping the current state — identity, endpoints, data, the systems people actually use — and naming the real problem rather than the symptom. You come out of scoping with a shared, written understanding of what we're solving and why, not a guess.
Solution design
With the problem clear, I design an approach and put the reasoning on paper. Where there's more than one sensible path, you get the options with their trade-offs — cost, complexity, risk, and what it takes to maintain — so the decision is yours and it's an informed one. I favour layered, maintainable controls over the most products, and I'd rather harden the basics well than ship complexity that won't be kept up.
Implementation
Delivery is staged and change-managed, not a big-bang switch-flip. I work through the build deliberately, keep you in the loop on what's happening and why, and avoid surprises. Configuration and changes are documented as they're made — because "managing the unseen" only works if the work can be seen when it needs to be.
Hand-off
The project isn't finished when it works; it's finished when you understand it and can run it. I hand over runbooks, configuration notes, and a walk-through so the knowledge lives with you, not locked in my head. No black boxes, no dependency by design — you should be able to pick this up a year from now and know exactly how it fits together.
No price list
Every project is unique, so every project is scoped on its own terms. Rather than a fixed rate card, you get a tailored scope and an honest estimate built from the actual work in front of us. That keeps the conversation about the right outcome instead of squeezing your problem into a pre-made package.
Availability
This work happens at my availability. I take on projects where I can do them properly and give them the attention they deserve, which means I'm upfront about capacity rather than over-committing. If the timing doesn't line up, I'll tell you plainly.
When it's not me
If a project sits outside my skillset, or outside what I can take on right now, I won't string you along — and I won't disappear either. I'll offer a complimentary, no-expectation recommendation to solution providers I'd trust with it: people and firms who can actually help, with no referral arrangement and nothing owed to me or them. Pointing you to the right help is part of doing this properly, whether or not I'm the one who ends up doing the work.
If you've got something you'd like to talk through, get in touch — even if it's just to figure out whether I'm the right person for it.