Cloud Solutions

Cloud transformation, scoped and shipped.

Project-based cloud advisory and delivery for organizations modernizing on Microsoft Azure and Microsoft 365. Bounded engagements with clear deliverables — not open-ended consulting retainers and not a productized monthly service. The engagement model is named, the scope is fixed, and the price is on paper before work starts.

How this differs from Smart IT

Smart IT is productized recurring managed services, priced per user per month. Cloud Solutions is project work — typically 4–12 weeks — shipped against a fixed scope and fixed price (or T&M with a not-to-exceed cap). If you need ongoing M365 operations, that's Smart IT. If you need a defined cloud project shipped, that's Cloud Solutions. Some customers do both: a Cloud Solutions migration project followed by Smart IT for ongoing run.

In scope

The work we do, named explicitly.

Five typical engagement shapes. Each is bounded — clear deliverables, clear timeline, clear acceptance criteria. None of these are "let's see where it goes" engagements.

Foundations

Azure Landing Zone

A production-ready Azure tenant set up with proper subscription topology, Conditional Access, identity guardrails, networking baseline, observability, cost controls, and policy-as-code.

  • Multi-subscription scaffolding with management groups
  • Conditional Access + MFA + privileged identity
  • Hub-spoke or zero-trust networking (depending on your needs)
  • Defender for Cloud, Log Analytics, Azure Monitor
  • Azure Policy + Cost Management baselines
  • Typical duration: 6–10 weeks
Migration

Microsoft 365 Migration

Moving an organization from Google Workspace, on-prem Exchange, or another M365 tenant to a properly configured M365 destination. End-to-end: identity, mail, files, devices, and end-user transition.

  • Pre-migration assessment and risk register
  • Identity merge or net-new tenant setup
  • Mailbox + drive + file share migration with cutover plan
  • Intune enrollment for managed devices
  • End-user comms and training
  • Typical duration: 4–12 weeks depending on size
Assessment

Technical Cloud Assessment

An honest, written evaluation of your current Microsoft cloud estate: what's working, what's at risk, what's spent on licenses you don't need, and what would actually move the needle if you fixed it. Useful for incoming CTOs, M&A due diligence, and preparing for audits.

  • Identity + access review (CA policies, admin roles, MFA coverage)
  • Endpoint posture (Intune, Defender, compliance)
  • License optimization (E3 vs E5, Copilot value, dormant accounts)
  • Security gaps prioritized by impact
  • Written report with concrete next-step recommendations
  • Typical duration: 2–4 weeks
Architecture

Architecture Review

Targeted second opinion on a specific architectural problem. Examples: "Is our Azure SaaS multi-tenancy model going to scale?", "How should we structure Conditional Access for 200 users across 4 entities?", "Is our DR strategy actually a DR strategy?". Time-boxed and document-driven.

  • Workshop sessions to understand the current design
  • Written architectural review with specific recommendations
  • Risk register with mitigation priorities
  • Optional: implementation oversight if you want one
  • Typical duration: 1–3 weeks
Programs

Larger Migration Programs

For organizations with more than ~150 users, more than one entity, or regulated environments, migrations and modernizations are programs rather than projects. Multiple workstreams, formal change management, parallel run periods, executive reporting cadence. We've run these in Switzerland and Germany at the 1,000-user scale and bring that operating discipline to smaller organizations who need it.

  • Multi-workstream program governance
  • Formal RAID log, status cadence, executive reporting
  • Parallel run and phased cutover planning
  • Vendor coordination (Microsoft, ISVs, system integrators)
  • Change management and end-user adoption
  • Typical duration: 3–9 months
Engagement model

Three phases, no surprises.

Every Cloud Solutions engagement follows the same shape regardless of size. The point is predictability — you know what we're doing this week, what we're doing next week, and what the deliverable looks like before we cash a check.

01

Discovery & Scoping

30–60 minutes on the phone, then a written scoping document that names the problem, the proposed approach, deliverables, timeline, and price (fixed-price for most engagements; T&M with not-to-exceed for very ambiguous ones). You sign that or you don't.

Typically 1–2 weeks
02

Delivery

Weekly status, bi-weekly stakeholder updates, and a shared workspace with all artifacts. Real implementation work, by the engineer who scoped the work — not handed off to a junior consultant. Risks and changes are flagged in writing as they emerge, not at the end.

Most engagements: 4–12 weeks
03

Handover & Continuity

A documented handover: runbooks, architecture diagrams, decision records, known issues, and follow-on recommendations. Optional knowledge-transfer sessions for your team. Optional transition into Smart IT for ongoing operations if that's the right fit. No "hostage" engagements.

1–2 weeks of overlap
Who this is for

Where Cloud Solutions tends to fit.

Useful framing: if your need is project-shaped (clear start, clear end, clear deliverable), this is probably the right offering. If your need is operations-shaped (recurring monthly responsibility for your tenant), Smart IT is probably the right offering.

Common fit

Companies modernizing onto Azure or M365

You're moving from on-prem Exchange, Google Workspace, an aging colocated infrastructure, or an unplanned mix of cloud accounts. You need it done properly, not extended into a 2-year retainer.

Common fit

Incoming CTOs and CIOs in their first 90 days

You inherited an estate you don't yet understand and need a written assessment with prioritized next steps you can take to your board. We deliver that as a deliverable — not as a precursor to selling you a bigger engagement.

Common fit

SaaS founders preparing for SOC 2 or ISO 27001

You need an Azure landing zone, identity hardening, audit logging, and a security baseline that will stand up to auditor scrutiny. We've seen what auditors actually flag and design accordingly.

Common fit

Mid-market companies in M&A integration

Two or more M365 tenants, two or more identity providers, and a deadline. Tenant-to-tenant migrations are technical and political; we run them with the discipline of a program, not a project.

What we don't do

Honest exclusions.

If your need falls into one of these, we'll tell you up front and refer you elsewhere. Not every problem is ours to solve.

Start the conversation

Tell us what you're trying to ship.

The first call is 30 minutes. We want to understand what you're trying to do and whether we're the right fit. If we are, you'll get a written scoping document inside a week. If we aren't, we'll tell you who to talk to instead.

Address
2121 Avenue of the Stars, Suite 800
Los Angeles, CA 90067
Looking for ongoing operations?