The problem
Subscriptions or projects have multiplied without a common framework, a go-live is approaching, or a security or compliance audit is coming up. You want an outside, written opinion before you decide.
What I do
- I examine your Azure or Google Cloud landing zone: governance, identity and access, network, security, FinOps guardrails.
- I interview the CIO office, security and platform teams, and I analyse the existing configuration: hierarchy, Azure Policy or Organization Policies, roles and privileges, costs.
- For a critical application, I test its resilience: points of failure, recovery objectives (RTO, RPO), then a chaos engineering session with your teams, within an agreed scope.
- I present my findings to management and to the teams.
Possible formats and deliverables
Decision workshop1 day
For an architecture decision stuck between several teams or several options.
- A documented, shared decision (ADR).
Architecture review4 to 8 days
Before a go-live or a structural choice, to challenge an integrator’s architecture document, or to prepare or evaluate a tender.
- A written, reasoned opinion.
- The risks identified.
- Recommended decisions, as ADRs.
- A presentation session.
Resilience audit8 to 12 days · One critical application
- A map of the points of failure, ranked by impact.
- A documented business continuity plan and disaster recovery plan, with RTO and RPO objectives per component.
- A report on the chaos engineering session.
- A prioritised action plan.
Cloud foundation assessment15 working days · Azure or Google Cloud
- A maturity score on 6 axes: identity and access, network, governance, security, costs, operations.
- The 10 priority risks, ranked by impact.
- A 90-day roadmap.
- A presentation to senior management.
Track record
- Azure Policy guardrails, FinOps included: allowed VM families and disk types.
- Access governance: Entra ID PIM, least-privilege AKS RBAC; on Google Cloud, tag bindings, IAM conditions and Organization Policies.
- Networking: hub and spoke, Private Endpoint, private DNS, Application Gateway and Azure Firewall on Azure; Shared VPC on Google Cloud.
- I organised several simulated outage exercises, including the loss of a cloud zone, and fault injection on AKS clusters with Azure Chaos Studio.