SiFr Consulting is a digital modernization advisory firm with a focus on adoption of cloud technologies, Identity and Access Management (IAM), Device Management, and Automation. Typical engagements consist of assessment, analysis, reporting, recommendation, and optional implementation phases. Implementation of recommendations provides a strong foundation for organizations to build on as they move forward with their modernization/cloud migration. Assessment saved one large insurance sector client $150,000 in their annual Microsoft spend by simply identifying misconfigured user objects in Active Directory.Identified significant vulnerabilities in every client environment assessed. These vulnerabilities are attributable to a lack of understanding within the clients of holistic concepts, misconfigurations, and a lack of basic maintenance.Implemented Intune and Autopilot for multiple organizations as the modern mobile device management (MDM) solution coupled with Conditional Access and CASB policies, enabling secure work-from-anywhere environments. This includes pure Azure AD as well hybrid environments.Partnered with 3rd party MSPs to fill their skill gaps.Developed an Azure Function App to collect and analyze M365 license information. The app typically identified an annual license savings range between 10% - 20%. In addition, the data generated by the app tends to tell a larger story about the client environment and user lifecycle in particular.Developed a variety of custom PowerShell scripts to meet client needs including automated user lifecycle integration between HRIS and Active Directory.

Advocated adoption of cloud technologies (IaaS, PaaS, SaaS), role based access controls (RBAC) and federated identity.Deployed and managed centralized identity management system (ILM) which automated end user life cycle.Implemented core infrastructure automation that converted Vancity’s otherwise manual process using industry standard methodologies including Group Policy for enterprise management.Revamped manual per-instance application install to automated, zero-touch application deployment via MSI Group Policy Application Management; continued to further advance automation using System Center (SCCM) for scheduled enterprise wide deployments.Streamlined Operating System (OS) deployment by creating a single master image and implementing unattended deployment using Remote Installation Services (RIS) and Windows Deployment Services (WDS), thus saving administrative effort in system upgrades and maintenance. Programmed standardized tools that enabled faster and more accurate troubleshooting from the Service Desk staff, resulting in improved overall customer service.Responsible for setting enterprise hardware standards, balancing performance, reliability, supportability and cost. Evaluated and added new technology as user requirements evolved.Managed $4.5 million Microsoft Enterprise Agreement that accelerated cloud technology adoption, and provided device licensing savings by converting to a user-based licensing model.Lead the mobile device RFP by evaluating new candidates to support expanded range of enterprise mobile devices that improved internal staff client business capabilities.Championed enhanced password complexity for both machine and user accounts. Strongly advocated adoption of multi factor authentication (MFA) for sensitive use cases and highly privileged users.Improved enterprise security by developing and implementing countermeasures to vulnerabilities identified in quarterly penetration tests.