Identity & access
Entra ID design and hardening: Conditional Access policies, phishing-resistant MFA, Privileged Identity Management and least-privilege admin models.
I help organisations secure and run their Azure and Microsoft 365 environments — identity and access, threat protection, SOC monitoring, endpoint security and cloud & on-prem infrastructure.
Contact meHands-on architecture and implementation across the Microsoft security stack, in the cloud and on-prem.
Entra ID design and hardening: Conditional Access policies, phishing-resistant MFA, Privileged Identity Management and least-privilege admin models.
Microsoft Defender XDR across identities, endpoints, email and cloud apps — configured, tuned and integrated into day-to-day operations.
Microsoft Sentinel deployment, data connectors, analytics rules, workbooks and automation — with an eye on signal quality and ingestion cost.
Intune device management and compliance, security baselines, application control and secure configuration for Windows and mobile fleets.
Azure landing zones, governance and secure network foundations, plus Windows Server and hybrid infrastructure for cloud and on-prem estates.
Security assessments of Azure and Microsoft 365 tenants with a prioritised, practical hardening plan — informed by an ethical-hacking (CEH) mindset.
I work as an independent consultant through my Swedish company, Fokusgate — fully remote, and as an extension of your team rather than a one-off project.
Based in Gothenburg, Sweden and Nairobi. I work fully remote and am available to teams in the Nordics, Germany and the rest of Europe.
Available for part-time and fractional engagements — a few days a week or a defined number of hours alongside your own staff.
Clear, prioritised recommendations and hands-on implementation, documented so your team can own and operate it.
Comfortable working in English, Swedish and Norwegian — in meetings, documentation and with end users.
Looking for help with Azure or Microsoft 365 security, or have a freelance assignment via FreelancerMap, Ework / Verama or directly? Send me a short note about the scope and timing.
Contact me