available for new engagements

Cloud infrastructure your team can actually own.

I secure, automate, and document cloud environments across Azure, AWS, and GCP — built as code, handed over clean, no tribal knowledge left behind.

Most engagements patch what broke. I build the identity baselines, automation, and version-controlled infrastructure that keep it from breaking in the first place.
engagement.tf · declarative by default
clouds
focus
delivery
based
what i do

Engineering across every major cloud

Azure, AWS, GCP, or all three. The through-line is the same: secure identity, automate the repetitive, and leave behind infrastructure that scales without constant hand-holding.

identity/access

Identity & access hardening

Zero-trust identity baselines across providers — Entra ID, AWS IAM, Google Cloud Identity. Conditional Access, least-privilege role design, MFA enforcement, and policy stacks deployed as version-controlled code from day one.

Entra IDAWS IAMConditional AccessTerraform
automation/ops

Automation & cloud operations

Replace repetitive clicks with reliable code. Pipelines for user lifecycle, policy enforcement, cost monitoring, and security alerting — runbooks and scripts your team can read, run, and trust.

PowerShellPythonTerraformCI/CD
partnership/retainer

Ongoing engineering partnership

A steady technical partner, not a one-off contractor. I embed on retainer — maintaining environments, driving improvements, reviewing security posture, and keeping infrastructure in step with the business.

Monthly retainerMulti-cloudSecurity reviewsRoadmap
the difference

Built to last, not just to ship

Every environment I touch gets documented. Every policy gets written as code. So when your team grows, when engineers turn over, or when you need to reproduce something fast — you can. No portal archaeology, no undocumented one-offs, no surprises. Just infrastructure your team understands.

recent work

Straight from the source

Latest public repositories, pulled live from GitHub. This section updates itself.

pricing

Fixed-scope packages

Transparent deliverables, clear timelines. Whether you need a one-time engagement or a steady engineering partner, there's a scope that fits.

most popular

Care Plan

Ongoing engineering & admin support for teams that want a partner on call.

term ongoing · cancel anytime

  • User onboarding/offboarding + license management
  • Mailbox, Teams, and SharePoint administration
  • Ticket triage and issue resolution
  • Monthly security & compliance check-ins
  • Policy updates and light automation
  • Quarterly roadmap session + cost review
Get a quote

LaunchPad

New businesses, 1–15 users, on M365 Business Basic or Standard.

time 2–4 business days

  • Microsoft 365 tenant setup — Exchange, Teams, SharePoint
  • Domain connection + DNS configuration
  • Mail security — SPF, DKIM, DMARC
  • Baseline MFA and password policies
  • Admin/user accounts + group structure
  • Architecture diagram + admin runbook + 1 training session
Get a quote

SecureFoundation

Growing teams on M365 Business Premium, Intune included.

time 1–2 weeks

  • Everything in LaunchPad
  • Full Conditional Access stack — 11 policies, deployed as code
  • Intune device compliance — Windows, macOS, iOS, Android
  • App protection policies for BYOD mobile
  • Audit log pipeline to Log Analytics
  • Break-glass account configuration + onboarding guide
Get a quote
how it works

From first contact to handoff

A lightweight process that respects your time. No lengthy discovery gauntlet, no surprise scope creep.

01

Tell me where you are

Submit a quote request with your cloud setup, team size, and what's frustrating you right now. Just enough context to have a real conversation.

02

30-minute scoping call

We walk through your environment, your goals, and where the gaps are. I flag quick wins alongside longer-term work and send a written scope within one business day.

03

I get to work

Automation scripts, infrastructure changes, and security configuration are built as code and documented as I go. You get progress updates, not a black box.

04

Handoff or continued partnership

Every engagement ends with a documentation pack your team can actually use. For retainer clients, it's the start — we keep iterating and staying ahead of what's next.

get started

Let's talk about your cloud

Tell me what you're working with and what's slowing you down. I respond within one business day with a clear proposal.

  • No obligation — just a conversation
  • Fixed-price proposals, no billing surprises
  • Azure, AWS, and GCP engagements welcome
  • One-time projects and ongoing retainers

or email direct → admin@ekaetteumoh.cloud