You will get a Microsoft 365 and Entra ID security assessment
Top Rated
Project details
I will perform a structured security assessment of your Microsoft 365 and Microsoft Entra ID environment to identify configuration gaps, excessive privileges, weak authentication controls, insecure sharing, endpoint risks, and monitoring deficiencies.
Depending on the selected package, the assessment can include Entra ID, MFA, Conditional Access, administrative roles, Exchange Online, SharePoint, OneDrive, Microsoft Defender, Intune, Azure Policy, Defender for Cloud, logging, alerting, and governance controls.
You will receive clear, risk-ranked findings supported by technical evidence and practical remediation recommendations. Standard and Advanced packages include a prioritized improvement roadmap, while the Advanced package also includes executive-level reporting and a review workshop.
I am a Microsoft Certified Azure Solutions Architect Expert and Azure DevOps Engineer with more than 10 years of experience supporting enterprise Microsoft cloud, identity, infrastructure, and security environments.
Depending on the selected package, the assessment can include Entra ID, MFA, Conditional Access, administrative roles, Exchange Online, SharePoint, OneDrive, Microsoft Defender, Intune, Azure Policy, Defender for Cloud, logging, alerting, and governance controls.
You will receive clear, risk-ranked findings supported by technical evidence and practical remediation recommendations. Standard and Advanced packages include a prioritized improvement roadmap, while the Advanced package also includes executive-level reporting and a review workshop.
I am a Microsoft Certified Azure Solutions Architect Expert and Azure DevOps Engineer with more than 10 years of experience supporting enterprise Microsoft cloud, identity, infrastructure, and security environments.
Cybersecurity Expertise
Audit, Risk Assessment, Gap AnalysisTechnology Type
IaaS, Computer Network, SaaS, Email System, Mobile DeviceCybersecurity Regulation
ISO, NIST Cybersecurity Framework, SOC 2Company Size
Medium Company SizeWhat's included
| Service Tiers |
Starter
$400
|
Standard
$850
|
Advanced
$1,750
|
|---|---|---|---|
| Delivery Time | 4 days | 5 days | 12 days |
Cybersecurity Monitoring | - | ||
Malware Removal | - | - | - |
Security Analysis | |||
Security Patch Installation | - | - | - |
Optional add-ons
You can add these on the next page.
Conditional Access Remediation
(+ 3 Days)
+$400
Intune Security Baseline
(+ 4 Days)
+$500
Defender Security Remediation
(+ 4 Days)
+$500Frequently asked questions
71 reviews
(65)
(5)
(1)
(0)
(0)
This project doesn't have any reviews.
SE
Sserunjogi E.
Mar 4, 2026
Azure Expert needed to restore system currently down due to availability zone and disk missmatch
He has saved me a lot, I'm hiring him again soon. He's so good
EM
Ellis M.
Jul 17, 2025
Need help with changing public/private IP access in Azure
Kashif is excellent, highly skilled and gets right to the matter at hand. Lifesaver in a tough spot.
PH
Paul H.
Jan 23, 2025
Restarting Azure Services
He's great, will work with Kashif again.
AB
Arnaud B.
Dec 7, 2024
nginx configuration
It was a pleasure to work with Kashif as usual
KP
Kenn P.
Nov 24, 2024
Urgent DevOps Support required (CloudFront + nginx)
great Upworker! Strongly recommended.
About Kashif
Azure Solutions Architect Expert & DevOps Engineer
100%
Job Success
Lahore, Pakistan - 10:33 am local time
I’m a certified Azure Solutions Architect and DevOps Engineer with over 10 years of experience in designing, deploying, and automating cloud-native and hybrid IT infrastructures. My focus is on delivering secure, scalable, and high-performance solutions across multiple platforms.
🧾 Certifications:
✅ AZ-400: Designing and Implementing Microsoft DevOps Solutions
✅ AZ-305: Azure Solutions Architect Expert
✅ AZ-104: Azure Administrator Associate
✅ Azure DevOps Assessment (18473)
☁️ Cloud Expertise:
🔷 Microsoft Azure:
Networking & Security: Azure Front Door, Application Gateway, Load Balancer, VNet, NSG, VPN Gateway, Private Endpoints, DNS management
Compute & Containers: Azure Virtual Machines, Azure Kubernetes Service (AKS), Azure Container Instances (ACI), Azure Functions
App Services & Integration: Azure Web Apps, Logic Apps, Azure API Management, Azure DevOps (CI/CD pipelines)
Data & AI: Azure SQL Database, Azure Blob Storage, Azure AI Services, Azure Batch
Identity & Access: Azure Entra ID (Azure AD), B2B/B2C Identity Management, Hybrid AD Join, Role-Based Access Control
Governance & Monitoring: Azure Policies, Resource Graph, Cost Management, Azure Monitor, Log Analytics
🟧 AWS Cloud:
EC2, RDS, EKS, IAM Policies, Lambda (serverless), S3, SES, ECR, VPC, CloudWatch
AWS Load Balancing, Lightsail, Route 53, CloudFront
Backup, Monitoring, and Serverless Architectures
🌐 Other Cloud Platforms:
Google Cloud Platform (GCP): Basic infrastructure & VM setups
DigitalOcean, Vultr, OVH, Hetzner: Resource provisioning, DNS, networking, LAMP/LEMP stacks, and firewalls
🔧 DevOps, IaC & Automation:
Infrastructure as Code: Terraform, ARM Templates, Ansible, Puppet, Chef
Automation: PowerShell, Bash, Python, Chocolatey, GitHub Actions, Azure Automation
Containerization & Orchestration: Docker, Kubernetes, LXC
CI/CD: Azure DevOps Pipelines, GitHub Actions, YAML & classic pipelines
System Hardening & Patch Management (RHEL, Ubuntu, Windows)
🧩 Open-Source Deployments & App Hosting:
Matrix Synapse homeserver deployment and management
Keycloak identity provider setup and integration with apps (including Jitsi, Nextcloud)
Web hosting: Apache, Nginx, Plesk, Webmin, cPanel
Applications: Odoo, Nextcloud, Plainpad, FrePPLe, and more
Secure email hosting (Postfix/Dovecot), Mail Servers, DNS (BIND, Cloudflare, Namecheap APIs)
If you're looking for a dependable engineer who can handle complex infrastructure, optimize performance, and automate workflows across Azure, AWS, and open-source platforms—I'm ready to help.
✅ Let’s connect if you want to get your systems secure, scalable, and future-ready.
Steps for completing your project
After purchasing the project, send requirements so Kashif can start the project.
Delivery time starts when Kashif receives requirements from you.
Kashif works on your project following the steps below.
Revisions may occur after the delivery date.
Confirm scope and access
I will confirm the selected package, tenant scope, business priorities, licensing, required access, and any compliance or reporting expectations.
Assess security controls
I will review the included Entra ID, Microsoft 365, Conditional Access, Defender, Intune, Azure, logging, sharing, and governance controls.