01
Make Microsoft Entra ID the control plane for every sign-in. I design Conditional Access, MFA, and privileged access for Zero Trust, the same work I led as a global Microsoft identity architect across 120+ operating companies.
02
One identity, one sign-in, automatic access. I move apps from ADFS to Entra ID single sign-on, automate provisioning with SCIM, and build joiner-mover-leaver processes that don't depend on tickets.
03
Bring order to the directory everything else depends on. Hands-on AD design, consolidation, and migration, applied to securing what you have and planning the move to cloud-native identity.
04
Copilot sees everything a user can open, so readiness is an identity and access problem first. I find and fix oversharing, tighten access in Entra ID and SharePoint, and set up a measurable pilot.