Five practice areas,
one experienced team
Technology, security, and the operations around them are usually the same problem seen from different angles. We staff engagements with people who work across all of it, in public health and federal environments since 2018.
Book a consultationCloud & Infrastructure
Azure and AWS migrations, identity architecture, and the network and backup layers underneath them.
We move workloads to Azure or AWS, rebuild the network and identity layer underneath them, and replace aging on-premises hardware with infrastructure that can be rebuilt from code. Every migration starts with a dependency map: nothing moves before we know what calls it, and no cutover happens without a rollback we have already tested.
- Azure landing zones and AWS Control Tower
- Entra ID tenant design, conditional access, and hybrid join
- Microsoft 365 tenant migration and consolidation
- Terraform-managed infrastructure and deployment pipelines
- Veeam and Azure Site Recovery backup and DR
- Windows Server and VMware end-of-life replacement
- Azure and AWS cost review and reserved-instance planning
Cybersecurity & Compliance
Assessment against NIST 800-53 and the HIPAA Security Rule, the controls that close the findings, and the evidence an auditor will ask for.
We assess the environment against the control set you are actually held to, rank the findings by what an attacker reaches first, and implement the fixes. Documentation is written while the work happens, so an ATO package or a HIPAA audit draws on evidence that already exists.
- NIST 800-53 and NIST CSF control assessments
- HIPAA Security Rule risk analysis
- FISMA ATO packages: SSP, SAR, and POA&M
- Continuous monitoring and control evidence collection
- Entra ID conditional access and privileged identity management
- Microsoft Defender and CrowdStrike endpoint rollout
- SPF, DKIM, and DMARC enforcement
- Phishing simulation and security awareness training
Custom Software Development
Line-of-business applications, portals, and the integrations between systems that were never designed to talk to each other.
We build web applications, internal tools, and customer portals in .NET, Node, and React, along with the APIs that connect them to whatever is already in place. Every project ships with tests, a README a new developer can follow, and a walkthrough for whoever will maintain it after we leave.
- .NET, Node.js, and React web applications
- REST and HL7 / FHIR integrations
- SQL Server and PostgreSQL schema design and query tuning
- Legacy Access, VB6, and classic ASP replacement
- Section 508 and WCAG 2.1 AA accessibility
AI Solutions
Document search, extraction, and drafting, deployed inside your own tenancy with the access controls and audit trail your sector requires.
The work that pays off first is narrow: finding the right document, drafting the routine reply, pulling structure out of records that were never structured. We scope those use cases against what they cost to run, deploy them on your own data in your own Azure or AWS tenancy, and put access control and prompt logging in place before the first query.
- Use-case assessment and running-cost modelling
- Retrieval over your own documents in Azure OpenAI or AWS Bedrock
- Prompt and output logging for audit
- Acceptable-use policy and staff training
Business Operations
Vendor obligations, staffing gaps, and program documentation: the work that gates delivery without appearing on any technical roadmap.
A program is as often held up by an untracked contract deliverable or a staffing gap that has been open two quarters as by an engineering problem. We take that work on with people who have run it before, and fix the process underneath it so the backlog does not rebuild the moment we stop.
- Contract deliverable and vendor obligation tracking
- Subcontractor and staffing plan management
- PMO support, status reporting, and schedule maintenance
- Standard operating procedures and runbook authoring
- Risk registers and governance boards
- Records management and administrative support