Backup & disaster recovery
Acronis Cyber Protect Cloud design and deployment, protection plans and restore testing. Root-cause analysis of backup failures, including VSS conflicts, plus a licensing cost review.
Learn more →Independent cloud infrastructure & security engineer
Senior engineering depth, without the full-time hire.
I help small MSPs and SMB IT teams in North America with backup and disaster recovery, Microsoft 365 security and infrastructure migrations, delivered remotely, on your schedule and under your brand.
Full overlap with US Eastern & CanadaBased in Brazil (UTC-4), working your business hours
Multi-tenant MSP experienceL2/L3 escalations across many client environments
Security first, documented alwaysRunbooks, rollback plans and before/after evidence
English, Portuguese, ItalianClear written communication with your team and clients
Core services
What I take off your plate
Hands-on work in the areas where small teams most often lack depth: protection, identity and the projects nobody has time to plan properly.
Microsoft 365 & Entra ID security
Tenant hardening, MFA and Conditional Access, admin role review and Secure Score improvement, applied consistently across one tenant or many.
Learn more →Endpoint & email security
Sophos Central deployment and tuning, email protection and phishing-simulation rollout, and fixing conflicts between security agents and backup tools.
Learn more →Infrastructure migrations
Active Directory and domain migrations, server upgrades, DFS-R and file server moves. Every cutover comes with a runbook, validation steps and a rollback plan.
Learn more →Secure remote access
Zero-trust access with Tailscale or similar for small and mid-size offices: no open ports, per-user access and simple administration.
Automation & reporting
PowerShell and Python automation for recurring operational work: tenant reports, onboarding, compliance checks and the spreadsheets someone fills in by hand every month.
For MSPs · white label
An extension of your team, behind your brand
Small MSPs often lack cloud or security depth in-house. I work under your name, in your tools and your ticket queue.
Learn more →01
Tier 2/3 escalations
Overflow engineering for hard tickets, cloud issues and security incidents.
02
RMM setup & automation
Syncro (or similar) policies, alerting and PowerShell scripts.
03
Baseline compliance scanning
Automated checks across client environments, with findings and a remediation plan.
04
Documentation & runbooks
SOPs, onboarding and offboarding checklists, and centralized vendor and contact databases in SharePoint.
Fixed-scope packages
Clear scope, clear deliverable
Start with a defined outcome. Each package ends with something you can hand to your client or keep for your records.
M365 Security Baseline Audit
Review of MFA, Conditional Access, admin roles, mail flow, Secure Score and device policies.
DeliverablePrioritized findings report and remediation plan
Backup Health Check
Review of protection plans, retention, immutability, failure history and a real restore test.
DeliverableHealth report with fixes ranked by risk
Migration Package
Assessment, cutover plan, migration, validation and rollback plan.
DeliverableRunbook, completed cutover and handover notes
Tenant Hardening Sprint
Apply the baseline from the audit across one or more tenants.
DeliverableChange log and before/after Secure Score
Selected work
Recent engagements
Client names are kept confidential.
Cross-domain server migration
Phased cutover of file and medical imaging application servers to a new domain: NTFS/SMB permissions validation, service accounts, scheduled tasks, GPO updates and DNS cleanup, following a phased cutover playbook.
Windows Server 2012 → 2022
End-to-end domain controller replacement: promotion, FSMO role transfer, DHCP and DNS migration, and Robocopy-based moves of multiple file shares.
Backup failures traced to the root
Diagnosed recurring Acronis Cyber Protect failures down to VSS conflicts and coordinated vendor escalations until backups ran clean.
Endpoint & email protection rollout
Sophos Central deployment across clients, including a DNS-based mail routing workaround for single-tenant Microsoft Graph API limitations.
Hybrid Azure for many clients
Patch management and vulnerability remediation across Windows and Linux with BigFix, CrowdStrike Falcon and Rapid7, plus hybrid architectures connecting Azure to on-premises sites.
Manual reporting, automated
Python automation of a monthly multi-vendor sales reconciliation, replacing hours of manual data entry with a repeatable report.
How we work
From first message to handover
- Tell me about your environmentTenants, tools, number of users and what is going wrong or needs to change.
- Scope and quoteYou get a written scope, deliverables and a price before any work starts.
- Delivery with least-privilege accessChanges follow an agreed plan, with rollback steps and progress updates.
- HandoverDocumentation, evidence and recommendations your team can act on.
Engagement models
Pick what fits the work
Fixed-price packageA defined outcome, such as an audit or a migration.
Monthly retainerA set number of hours per month for escalations, automation and ongoing security work.
HourlyShort, unpredictable tasks.
Toolbox
Platforms I work in every day
Microsoft & identity
- Microsoft 365
- Exchange Online
- Entra ID
- Intune
- Active Directory
- Group Policy
- Azure
Security & backup
- Sophos Central
- CrowdStrike Falcon
- Rapid7
- Acronis Cyber Protect
- JumpCloud
- Delinea
Operations
- BigFix
- WSUS
- ServiceNow
- Syncro
- Datadog
- Grafana
- Zabbix
- PRTG
- Domotz
Platforms & scripting
- Windows Server
- RHEL / Ubuntu / SUSE
- VMware vSphere
- Citrix
- GCP
- PowerShell
- Python
- Bash
Get in touch
Get a quote
Tell me about your environment and what you need done. I'll reply by email with a scope, deliverables and a price.
- Number of tenants, sites or clients
- Users and devices
- Tools you use today
- What you need done, and by when