Find what to fix first and unblock what is stuck
A hands-on infrastructure and security leader who ran IT for 15 countries and 19,000 users, now working with companies across several countries. A short review finds what to fix first and why. A stuck project gets unblocked in days.
- years leading IT
- 26
- countries
- 15
- users
- 19,000
Which moment are you in?
Each of these starts with the same short review, aimed at where you are.
- Fastest start
A stuck project
A migration or rollout stopped halfway. We start there and unblock it in days.
Start with the review Are we secure?
No evidence either way. You get a priority list to show management.
Start with the reviewA new IT leader
You inherited the environment. An outside view from someone who ran it for 15 countries.
Start with the reviewA security incident
After an outage or close call: what to fix first, then fixing it with your team.
Start with the reviewAudit, compliance, insurance
A finding, a client questionnaire or an insurance requirement needs an answer.
Start with the review
One senior review shows where to start
We review your infrastructure and security, mostly remote, at a fixed scope. You get findings, what to fix first and why, and an unblock plan for a stuck project.
- Findings
- Priority list
- Unblock plan
Stuck project
In days
Diagnosis and an unblock plan, so the work moves again.
Broad review
Up to 2 weeks
A wider look across infrastructure and security, ending in a priority list.
What comes after the review
Each step is a decision you make after seeing the one before.
- Start here
Review
Findings, priorities and an unblock plan.
Paid roadmap
A 12-month plan you can take to management.
12 months, with cost estimates and a management presentation.
Projects
Work from the findings, in seven areas, done hands-on.
- Optional
Optional monthly
We keep running what we built, if you want that.
Where we do the work
Projects come from the review findings, in these seven areas. Pick one to see what we check.
Firewall migration or redesign
What the review checks
- Whether policies match how traffic really flows today
- Layer 7 controls in use, versus left switched off
- Rules and exceptions that grew without an owner
Typical projects
- Migration to a new firewall platform
- Redesign of rules and zones
- Layer 7 policy clean-up
Zero Trust and micro-segmentation
What the review checks
- Who and what can reach which systems today
- Where a flat network lets a problem spread
- Whether access depends on identity and device
Typical projects
- Zero Trust access design and rollout
- Micro-segmentation of internal systems
- Optional monthly
- Managed Zero Trust with Cloudflare, run by us after the project.
Network design or redesign
What the review checks
- How the network is laid out and where it is fragile
- Sites that depend on a single device or path
- Whether it fits the offices and countries you run
Typical projects
- Redesign of an existing network
- A new network built from scratch
- Sites and countries brought onto one standard
Microsoft 365, Exchange and Active Directory
What the review checks
- How Microsoft 365 is configured against how you work
- Exchange and mail flow across your countries
- Active Directory structure, access and old accounts
- Whether Intune policies cover the devices tied to these accounts
- Whether Microsoft Defender for Endpoint (MDE) protects those devices
Typical projects
- Exchange migration or clean-up
- Active Directory redesign or consolidation
- Microsoft 365 configuration and security hardening
- Intune policies tied to Microsoft 365 identity and access
- MDE deployment and configuration
Endpoint management
What the review checks
- How laptops and devices are enrolled and kept current
- Whether every device follows the same policy
- How a new device gets set up for a user
Typical projects
- Device management with Intune
- Zero-touch setup with Autopilot
- Software and patch deployment with Endpoint Central
- Optional monthly
- We can keep running endpoint management after the project.
Automation of repetitive IT work
What the review checks
- Which routine tasks eat your team's time
- Which of them follow fixed steps a script can run
- Where scripts exist but nobody owns them
Typical projects
- Scripts for account, mailbox and device routines
- Reports and workflows built on Microsoft Graph
Multi-country infrastructure roadmap
What the review checks
- Where each country stands against the others
- Which standards each country follows today
- What to align first across countries
Typical projects
- A 12-month roadmap with cost estimates
- A presentation to management
- Standards to align the countries
Senior judgment, hands-on work
He ran it himself.
He led IT across Latin America for 26 years, up to 19,000 users in 15 countries.
Senior and hands-on.
We diagnose like a director and configure it ourselves. No junior learns on your project.
Knows multi-country Latin America.
Works in English with U.S. headquarters, and in Spanish with local teams.
Alejandro J. Duni
Founder and Principal Consultant
Alejandro spent 26 years at KPMG, from IT Network Manager to LATAM Infrastructure Director. He is a Palo Alto Accredited Configuration Engineer.
Experience behind the review
- years leading IT
- 26
- countries
- 15
- users
- 19,000
26 years leading IT for KPMG's offices across Latin America, from 50-user offices to 7,000 users in Brazil, 19,000 users in total.
There is no problem Alejandro cannot solve
Daniel Vitorino AlvesLATAM Infrastructure Manager, KPMG LinkedIn recommendationFiercely committed, highly reliable, and always results-oriented
Raul BanalesDirector Global Technology, KPMG International LinkedIn recommendation
When we are not the right fit
We say so early, so nobody spends time on a bad match.
- Companies under 50 employees
- Companies with no IT team or IT leader
- Cheap hourly labor without a senior view
- Help desk, NOC or 24/7 support
- Full-time on-site work for months
- License or hardware resale
- Government and state-owned companies
Ready to see what to fix first?
Book a call to talk through your situation. If a project is stuck, we start there.
Book a call