For IT Managers and Sysadmins
Senior Microsoft 365 security and IT execution for lean teams. Start with a Health Check, run fixed-scope sprints to close known gaps, or add fractional IT management when you need ongoing ownership.
Ongoing Microsoft 365-focused IT management for lean teams where security cannot be an afterthought. Includes IT/security backlog ownership, Microsoft Secure Score improvement, vendor oversight, roadmap execution, and cyber insurance readiness work.
Fixed-price, one-day remote engagement reviewing M365, identity, email, and endpoint posture. Deliverable: prioritized findings report.
Identity & Access - Find gaps in your Entra ID tenant security before an attacker does.
Entra ID security hardening: Full tenant review, roles, legacy auth, PIM. Assessment + findings report. Fixed-scope M365 security.
Duration: 2-3 weeks Price: $3,500 – $6,500
Identity & Access - A CA policy framework designed, deployed, and tested based on your organization's needs.
Conditional Access architecture: Design and deploy CA policy framework. Device compliance, risk-based, location policies. M365 security sprint.
Duration: 2–4 weeks Price: $3,500-$8,500
Identity & Access - Organization-wide MFA enforced — or upgraded from SMS to phishing-resistant methods.
MFA deployment sprint: Org-wide rollout. FIDO2, Microsoft Authenticator phishing-resistant. Weak methods eliminated. Fixed-price M365 security.
Duration: 2–4 weeks Price: $4,000-$7,500
Identity & Access - Eliminate standing admin accounts. Just-in-time access for every privileged role.
PIM sprint: Just-in-time access for privileged Entra roles. Eliminate standing admin accounts. Approval workflows, access reviews. M365 security.
Duration: 2–3 weeks Price: $4,500-$7,000
Endpoint & Device Management - Microsoft and CIS security baselines deployed across every managed device.
Intune security baseline: Deploy Microsoft & CIS benchmarks. Windows/mobile compliance policies. Automated remediation. M365 endpoint security.
Duration: 2–4 weeks Price: $4,500-$7,500
Endpoint & Device Management - New devices that provision themselves. Zero IT touch required.
Intune zero-touch enrollment: Autopilot + Intune. Auto-provisioning, app deployment, profiles. No IT touch required.
Duration: 2–3 weeks Price: $6,500-$10,000