Focused Offers
Fixed-scope architecture work for the first risks to clean up.
Each offer starts with a concrete deliverable stack: current-state map, risk inventory, recommended path, and an implementation SOW when the next slice is clear.
AZ
Azure Secret Exposure Prevention Assessment
Review credential paths, local development certificates, app registrations, managed identities, deployment settings, and places secrets can leak into code, logs, scripts, or repositories.
- Identity map
- Secret inventory
- Config boundaries
- Remediation plan
TEN
Tenant Data Protection Architecture Review
Map tenant boundaries, sensitive data use paths, key custody, rotation needs, authorization checks, unsafe exports, and support access patterns that can outrun policy.
- Boundary model
- Role review
- Data-flow trace
- Evidence gaps
NET
Legacy .NET Modernization Sprint
Map brittle APIs, WCF/WinForms surfaces, RBAC, accessibility, deployment state, and data risks into a low-regret modernization backlog and first implementation slice.
- Upgrade path
- Service boundaries
- Deployment checks
- Support surface
A11Y
Accessibility Risk and WCAG Remediation Review
Review against a named accessibility target such as WCAG 2.2 AA, including keyboard paths, focus behavior, screen reader semantics, contrast, validation messaging, and component patterns that can block users or create compliance risk. See the accessibility review method.
- Keyboard flow
- Focus states
- Semantic markup
- Remediation plan
DET
Spec-Driven Automation Build
Turn repeated operational decisions into written workflow rules, testable boundaries, deterministic generation paths, validation checks, and review queues.
- Typed contracts
- Code generation
- Validation rules
- Repeatable jobs
Controlled Work
The method stays visible without making the homepage carry every detail.
Assessment work should produce evidence a team can inspect: what was checked, what failed, what changed, and what remains outside scope.
Accessibility review
WCAG-focused review with manual keyboard, screen reader, semantics, contrast, reflow, and remediation acceptance checks.
Automation method
Agentic implementation is treated as candidate work until it is challenged, verified, and converted into deterministic contracts where repeatability matters.
Evidence handoff
- Current-state map and risk inventory
- Reproduction steps and acceptance criteria
- Implementation path and retest evidence
Proof of Thinking
Examples stay sanitized, but the shape of the work should be inspectable.
The public proof should show how problems are approached without exposing client records or private systems.
Credential-safe Azure resource manager
Configuration and Key Vault flow that keeps local development, managed identity, and deployment settings out of source control.
Tenant protection workflow
Service-bound encryption/decryption paths, key-version handling, access rules, and evidence needed to avoid scattered sensitive-data habits.
Parser and code-generation architecture
Written contracts that generate repeatable behavior while keeping review, tests, and failure handling visible.
Who It Fits
Best fit is a team that already knows the system matters.
The strongest engagements are bounded, technical, and operationally important.
Stack
.NET and Azure systems, or a planned move toward that stack.
Risk
Credential exposure, tenant data, legacy modernization, or high-risk automation is slowing delivery.
Buying shape
The team needs senior architecture judgment and a scoped path more than open-ended staff augmentation.