Fragile automation
- Partial runs reported as successful.
- Scripts without an owner.
- Scheduled jobs that stop unnoticed.
Trace the integration, test its outputs and add the checks it is missing.
What I can help with.
I work across the tools, infrastructure and processes your team depends on.
30 services · 4 disciplines · 6 engagement types
Start with the problem.
Pick what sounds familiar.
Manual work
- The same steps every week.
- Improvements stuck in a backlog.
- More customers means more manual work.
Pick the workflow worth automating. Simplify it first where needed.
Unclear access
- A customer asks who can reach their tenant.
- Apps hold permissions nobody can explain.
- Admin roles have widened over time.
Map delegated access, admin roles and application permissions to a purpose and an owner.
Recurring incidents
- A workaround has become a procedure.
- Vendors point at each other.
- The fix does not last.
Test hypotheses across the whole chain, from authentication and networking to the application.
Unknown dependencies
- A server nobody dares switch off.
- Jobs without documentation.
- Migrations blocked by unknown dependencies.
Inventory jobs and dependencies read-only. Decide what to keep, document, repair, replace or retire.
Disconnected tools
- Different customer records in each system.
- Documentation trails the actual setup.
- Monthly reconciliation in Excel.
Compare PSA, RMM, documentation and billing. Establish which source owns each field.
Cost and billing gaps
- Delivered services missing from invoices.
- Cloud costs nobody can explain.
- Licences assigned to inactive accounts.
Reconcile usage, contracts and invoices. Validate waste and billing gaps before reporting savings.
Alert noise
- Notifications nobody follows up.
- Tickets closed unread.
- Important failures lost in the noise.
Classify alerts, assign owners and tune routing and thresholds without losing critical detection.
- First step
- Monitoring Noise Reduction Sprint
MSP Operations Engineering
Automate repeat work and repair the links between your tools.
Start with one or two workflows. Identify the bottlenecks, choose a change and deliver it with tests and a runbook.
- Problem
- Manual tickets, fragmented records and jobs that fail unnoticed.
- Result
- Less repeat work. More predictable processes.
- For
- MSP owners, operations managers and engineering teams.
9 services in Operations
Operational Friction Scan
Review two workflows for repeat work, handoffs and waste. Produce a prioritised backlog.
Assessment / DiscoveryIntegration Reliability Assessment
Map selected integrations: triggers, credentials, dependencies, owners and silent failures.
Assessment / DiscoveryAutomation Sprint
Build one automation, test the agreed cases and hand it over with a runbook.
Implementation SprintAutomation & Integration Stabilization
Repair brittle jobs with error handling, retries, safe authentication and recovery paths.
Implementation SprintPSA–RMM–Documentation Consistency
Compare customers, assets and contract fields across PSA, RMM and documentation.
Assessment / DiscoveryImplementation SprintOn/Offboarding & Lifecycle Automation
Automate user, customer and device changes through Graph, with approvals and an audit trail.
Implementation SprintService Desk Cockpit & Ticket Enrichment
Add asset, user and documentation context to tickets using existing tools.
Implementation SprintMonitoring Noise Reduction Sprint
Classify and tune alerts, routing and deduplication. Measure before and after.
Assessment / DiscoveryImplementation SprintOperational Automation Roadmap
Prioritise automation by volume, failure impact, complexity and dependencies.
Assessment / Discovery
Microsoft Security & Identity Engineering
Know who has access to your systems and whether they still need it.
Inventory access read-only. Agree a target model, then implement approved changes with a test and rollout plan.
- Problem
- Broad permissions, inconsistent policies and applications without owners.
- Result
- A clear answer when someone asks who can access a system and why.
- For
- MSPs managing customer tenants and internal IT teams.
8 services in Identity
MSP Access Governance Review
Map GDAP relationships, roles, groups and principals. Define a target access model.
Assessment / DiscoveryGDAP Remediation & Lifecycle
Restructure delegated access and establish group, role and lifecycle checks.
Implementation SprintMicrosoft 365 Tenant Check
Check one tenant: identity, admin access, Conditional Access and selected security settings.
Quick CheckConditional Access Redesign
Design policies around user and risk profiles, with staged testing and rollout.
Implementation SprintWorkload Identity Review
Inventory app registrations, service principals, permissions, credentials and owners.
Assessment / DiscoveryWorkload Identity Remediation
Reduce application permissions and document credential requests, rotation and revocation.
Implementation SprintTenant Security Baselines & Drift
Set tenant standards, detect drift and repair approved deviations with recorded exceptions.
Implementation SprintM365 Security Improvement Program
Plan and deliver baseline, design and remediation work across tenants in agreed stages.
Improvement Program
Infrastructure Reliability & Remediation
Find the cause of recurring failures and unblock difficult changes.
Test hypotheses against evidence. Separate confirmed findings from suspected causes and agree the repair scope before changing production.
- Problem
- Recurring incidents, stalled migrations and undocumented dependencies.
- Result
- Verified causes and a controlled repair plan.
- For
- MSPs and internal IT teams working with complex infrastructure.
7 services in Reliability
Technical Problem Assessment
Gather evidence, test hypotheses and document confirmed causes and proposed repairs.
Assessment / DiscoveryComplex Infrastructure Remediation
Repair diagnosed issues in hybrid identity, AD, Azure, Windows, AVD and stalled migrations.
Implementation SprintLegacy Automation Discovery
Inventory scripts, cron jobs, scheduled tasks, services, accounts and dependencies read-only.
Assessment / DiscoveryTechnical Debt Reduction Roadmap
Rank legacy work by risk: keep, document, repair, replace or retire.
Assessment / DiscoveryAVD & Intune Reliability Engineering
Investigate image, provisioning, policy, FSLogix and compliance issues affecting users.
Assessment / DiscoveryImplementation SprintRecovery Readiness Assessment
Review backups, recovery goals and dependencies. Run a tabletop exercise or agreed restore test.
Assessment / DiscoveryTechnical Escalation Block
Scheduled investigation and peer review for your engineers. No on-call service.
Technical Escalation Block
Cost & Margin Optimization
Check that what you pay for and deliver matches your contracts and invoices.
Compare sources for an agreed period. Verify discrepancies and distinguish released capacity from actual cash savings.
- Problem
- Unbilled services, unused resources and unexplained cloud costs.
- Result
- Evidence of billing gaps and avoidable costs.
- For
- MSP operations and finance; internal IT with cloud and licence spend.
6 services in Margin
Revenue & Process Integrity Review
Reconcile vendor usage, PSA contracts and invoices for an agreed period and scope.
Assessment / DiscoveryBilling Reconciliation Automation
Replace recurring spreadsheet reconciliation with source comparisons and an exception workflow.
Implementation SprintAzure FinOps Assessment
Review Azure cost drivers, sizing, commitments and licences. Validate proposed changes.
Assessment / DiscoveryAzure & AVD Optimization Sprint
Test and apply selected Azure or AVD improvements. Measure before and after.
Implementation SprintM365 License Reclamation
Identify unused licences, submit them for review and revoke only after approval.
Assessment / DiscoveryImplementation SprintAsset & Service Consumption Integrity
Compare billable assets, assigned services and actual consumption.
Assessment / DiscoveryImplementation Sprint
Choose a starting point.
We agree the scope and deliverables before work starts.
Quick Check
WhenOne environment or a narrow configuration question.
You getFacts, prioritised findings and a short readout.
Assessment / Discovery
WhenThe cause, scope or risk is unclear.
You getAn inventory, evidence, findings and a proposed roadmap.
Implementation Sprint
WhenThe problem and acceptance criteria are clear.
You getConfiguration or code, tests and a runbook.
Improvement Program
WhenSeveral connected workstreams need attention.
You getA phased roadmap with agreed deliverables per batch.
Technical Escalation Block
WhenYour engineers need scheduled specialist help.
You getInvestigation, peer review or a documented decision.
Advisory
WhenYou need occasional review or follow-up.
You getPlanned advisory sessions, without ongoing managed support.
Investigation and adviceAn assessment does not authorise production changes. Implementation needs a separate decision.
ImplementationAgreed scope and acceptance criteria. Approved changes, tests, recovery plan and handover. No ongoing managed service.
What needs fixing?
Pick what applies, or email me directly. We’ll work out a first step.