CLOUD ENGINEERING
Architecture, migration, right-sizing
AWS, Azure and hybrid estates. Landing zones, workload migration, and the unglamorous work of matching instance classes to what actually runs on them.
TAKING NEW ENGAGEMENTS · Q4 2026
Infrastructure
that stops
costing you
surprises.
Cloud, networking, servers and security for enterprise and SMB teams — engineered properly, then tuned until the stack stops costing more than it should. One accountable consultant, no agency layers, no handoff to someone you never met.
2RANSOMWARE RECOVERIES
ZERO RANSOM PAID
ZERO RANSOM PAID
31%AVERAGE CLOUD
SPEND REDUCTION
SPEND REDUCTION
10dAUDIT TO PRIORITIZED
ROADMAP
ROADMAP
1CONSULTANT ON YOUR
ACCOUNT, START TO END
ACCOUNT, START TO END
01
Capabilities
IT systems engineering across the whole stack — from the network floor to the processes running on top of it. Not a menu of managed services.
NETWORKING
Segmentation, connectivity, edge
VLAN and subnet architecture, SD-WAN, site-to-site tunnels between offices and cloud, and remote access for staff — client VPN where it's still the right answer, ZTNA where it isn't. Firewall policy someone can still read in two years.
ENTERPRISE IT & WORKPLACE
Domains, servers and app delivery
Active Directory and Windows Server roles, moving a growing shop off workgroup onto a real domain, file shares with permissions that hold up to an audit. Plus published apps and virtual desktops — Citrix Workspace, RDS and Azure Virtual Desktop.
INFRASTRUCTURE
Consolidation and resilience
Server and storage consolidation, monitoring that pages a human only when it matters, and restore procedures that have actually been tested.
SECURITY & ZERO-TRUST
Identity-first access control
MFA enforcement, least-privilege review, device posture, conditional access. Rolled out in stages so nobody's workday breaks on a Tuesday.
RANSOMWARE
Assessment, response, recovery
Two full recoveries delivered, neither with a ransom paid. Pre-incident: backup validation and blast-radius review. Post-incident: containment, restore, and hardening so it does not repeat.
PROCESS & AUTOMATION
Automate the steps nobody should be doing
Map the manual workflow, remove the handoffs, script what's left. Includes putting AI tools into the business with real guardrails — so staff stop pasting client data into whatever tab is open.
STACK COST TUNING
Find the spend nobody owns
Idle reserved capacity, duplicate SaaS licenses, over-provisioned tiers, auto-renewals nobody remembers signing. Typically pays for the engagement.
02
Raeb OS
A working sketch of what an engagement produces. Toggle the policies, move the spend slider, run a command — the numbers respond the way a real posture review does.
ZERO-TRUST POLICY
MFA on privileged accounts6 accounts currently exposed
Network segmentation3 VLANs flat to production
Device posture checksUnmanaged endpoints permitted
Tested restore procedureLast verified restore: 411 days ago
POSTURE SCORE
58/100
4 controls still open. Each one is a finding in the audit.
CLOUD SPEND CALCULATOR
- TYPICAL MONTHLY SAVING
- $7,440
- FIRST-YEAR RECOVERY
- $89,280
TERMINAL — TRY scan, services, contact
raeb os — type a command, or 'help'
$ raeb scan --tenant demo
→ 14 idle reserved instances
→ 3 VLANs missing segmentation
→ MFA gap: 6 privileged accounts
03
How I work
Every engagement starts the same way, whether it ends in a migration or a two-page memo.
Scope call
Thirty minutes, free, no obligation. What hurts, what it costs you, and whether I'm the right person. Sometimes the answer is no and I'll say so.
Audit
Ten business days, fixed fee. Read-only access, interviews with the people who actually run things, and a look at what you're paying for.
Roadmap
Findings ranked by risk and by dollars, with effort estimates. Yours to keep and act on — with me or without me.
Execute & hand off
I build it, document it, and train whoever inherits it. The goal is that you stop needing me for that thing.
04
Engagement models
Four shapes. Most clients start with the audit and decide from there.
FIXED FEE · 10 BUSINESS DAYS
Infrastructure audit
The standard entry point. Full review of cloud, network, security posture and spend, ending in a ranked roadmap you own outright.
- Cloud and licence cost analysis
- Zero-trust gap assessment
- Backup and restore validation
- Prioritized remediation roadmap
The audit fee is credited in full toward any project that follows it.
START HERE →SCOPED · PROJECT RATE
Project engagement
A defined build with a defined end. Migration, segmentation rollout, zero-trust implementation, or incident recovery.
- Written scope and acceptance criteria
- Weekly progress against milestones
- Documentation as a deliverable
- Handoff and training included
PER BUILD · HOURLY OR MONTHLY
Technical delivery oversight
You have a product to ship and developers building it. I'm the technical authority in the room — reviewing the work, holding the timeline honest, and translating between the people funding it and the people writing it.
- Requirements into technical scope
- Developer and vendor management
- Architecture and security review
- Plain-language status for owners
MONTHLY RETAINER
Fractional IT leadership
For teams that need senior technical judgment on call but nowhere near a full-time hire. Vendor decisions, architecture review, escalation.
- Set hours per month, rolling
- Architecture and vendor review
- Escalation path for your team
- Quarterly posture and spend report
Start with a thirty‑minute scope call.
No pitch deck. Tell me what's breaking or what it's costing, and I'll tell you whether an audit is worth your money — including when it isn't.
DIRECT
- Message the business line
- BASED IN
- South Florida · remote across US