Conditional Access & MFA
A documented, persona-based policy set with phishing-resistant MFA and legacy authentication blocked.
Cloud identity & Zero Trust · Provo, Utah
Make Microsoft Entra ID the control plane for every sign-in. I design Conditional Access, MFA, and privileged access for Zero Trust, the same work I led as a global Microsoft identity architect across 120+ operating companies.
Local context
Provo's technology companies, university-adjacent organizations, and growing startups move quickly on new tools. That speed is an advantage with Copilot as long as identity and access keep pace.
Whether you're a growing team in Provo or an established company in Utah County, the work is the same: understand what your environment actually looks like today, fix the highest-risk issues first, and leave your team with something they can run.
What I deliver
A documented, persona-based policy set with phishing-resistant MFA and legacy authentication blocked.
Remove standing admin roles and move to just-in-time, approved, audited access.
Design or repair Entra Connect and Cloud Sync, hybrid join, and source-of-authority decisions.
Management groups, RBAC, and subscription standards that cut cost and improve visibility.
How it works
A short call and a read-only review of your tenant to confirm goals, constraints, and scope.
Evidence-based findings drawn from your actual configuration, ranked by risk and effort.
Staged, reversible changes alongside your IT team or MSP, with rollback plans.
Documentation, runbooks, and a prioritized backlog your team can own.
FAQ
Yes. I serve Utah with regular on-site visits in Salt Lake City, Lehi and Provo for workshops, CAB reviews and readouts in Provo. Most hands-on identity work happens remotely, which keeps costs down.
Not with a staged rollout. Policies start in report-only mode, impact is reviewed against real sign-in data, and break-glass accounts are protected before anything is enforced.
Conditional Access needs Entra ID P1, included in Microsoft 365 Business Premium and E3. PIM and risk-based policies need P2. I'll show you where P2 is worth it.
With a free 30-minute call, followed by a fixed-scope assessment or a fractional CIO plan with a fixed monthly fee. You'll know the cost and deliverables before any work begins.
A free 30-minute call about your environment. You'll leave with at least three concrete next steps, whether or not we work together.
Book a 30-minute call