We set up and run Microsoft Entra ID, Zero Trust and network security for mid-size organisations. The same controls we've built inside Canadian banks, sized for a team that doesn't have a dozen security staff.
Entra ID, single sign-on, MFA and Conditional Access, with privileged roles granted only when they're needed.
Firewalls, WAF and segmentation that match your identity policy, with alerts feeding into Sentinel and Defender.
Controls mapped to SOC 2, ISO 27001, PCI-DSS and PIPEDA, so the next audit has the evidence it needs.
Available for contract and project work across Canada. Eligible for Secret clearance.
Hire us for one piece, like a PIM rollout, or for the whole identity program. Either way you get the configuration done and the documentation your team needs to run it after we leave.
A clean Entra ID tenant that your users can sign in to once and your auditors can read.
Admins get elevated rights for a set time, with approval and a log entry. No one keeps standing admin access.
New hires get access on day one. Leavers lose it the same day. HR stays the source of truth.
Perimeter and internal controls that follow the same identity rules as everything else.
Scan results your developers can actually act on, with the fix spelled out.
Gap assessments and vendor reviews that end in a plan you can act on.
Review your tenant, directories, firewalls and current policies. You get a short risk summary.
Agree on the target state: roles, policies, and which apps move first.
Build in stages with pilot groups so users aren't locked out.
Runbooks, architecture docs and a walkthrough for your team.
Secure Business Technology is led by Hooman Khoshvaghty, a senior IAM and security consultant with more than ten years in Canadian banking, government and critical infrastructure.
Hooman has delivered IAM programs, firewall and WAF deployments and application security controls for several of Canada's largest banks. In that world audit readiness is the starting point, and he brings the same habits to every client.
His core work is Microsoft Entra ID: RBAC, Conditional Access, Privileged Identity Management and identity governance. He is just as fluent in OAuth 2.0, OpenID Connect, SAML, LDAP and Kerberos, and he has spent years connecting on-premises Active Directory to cloud identity without leaving trust gaps.
He can write the technical spec, present risk to a CISO, and then configure the policy himself. Clients get one person who covers all three.
Whether you're planning a project or filling a contract role, send a short note. You'll get a reply within one business day.