1. Home
  2. Services
Services

Everything Azure, from one team.

Eight disciplines that make up a well-run Microsoft cloud. Engage us for one, or for the whole stack.

01

Systems design & architecture

Before anything is deployed, we design the whole system: network, identity, workloads and recovery, and how they depend on each other.

What we do

  • Review of your current estate and requirements
  • Target architecture across network, identity, workload and recovery
  • Architecture decision records for every significant choice
  • Cost, risk and complexity trade-offs set out plainly

What you get

  • Architecture diagrams
  • A written decision log
  • A phased build plan
02

Landing zones & networking

A well-structured Azure foundation that new workloads can join safely, without redesigning the network each time.

What we do

  • Management group, subscription and policy structure
  • Hub-and-spoke virtual networks with firewall and VPN connectivity
  • Private endpoints and private DNS
  • Network security groups, routing and segmentation

What you get

  • A landing zone deployed with Terraform
  • Network diagram and IP address plan
03

Identity & access

Identity is the real perimeter in the cloud. We set up Microsoft Entra ID so the right people get in, from the right places, and nobody else does.

What we do

  • Entra ID tenant setup and hardening
  • Conditional access policies and multi-factor authentication
  • Hybrid identity with Entra Connect
  • B2B guest and cross-tenant access
  • Role-based access and privileged access

What you get

  • A documented access policy set
  • Roles, groups and admin model written down
04

Disaster recovery

We agree how much data you can afford to lose and how fast you need to be back, then build and rehearse recovery to meet those numbers.

What we do

  • Recovery objectives (RPO and RTO) agreed per workload
  • Azure Site Recovery replication to a second region
  • Recovery plans for failover and failback
  • Scheduled DR drills

What you get

  • A tested recovery plan
  • Step-by-step failover and failback runbooks
  • A drill report after each test
05

Azure Virtual Desktop

Desktops and apps your staff can reach securely from any device, sized for cost and designed with recovery in mind.

What we do

  • Host pools, session hosts and FSLogix profiles
  • Entra-joined or hybrid-joined session hosts
  • Scaling plans to control cost
  • Recovery design for AVD

What you get

  • A working AVD environment
  • An image and update process
06

Infrastructure as code

Every environment we build is written as code, so changes are reviewed, tracked and repeatable, and a lost environment can be rebuilt.

What we do

  • Terraform modules for networking, identity, compute and Key Vault
  • Remote state and deployment pipelines
  • PowerShell automation for day-two tasks
  • Bringing hand-built environments under code

What you get

  • A module library in your own repository
  • A deployment pipeline
07

Compliance & data protection

Microsoft Purview, set up so sensitive information is labelled, protected and kept where it belongs.

What we do

  • Sensitivity labels and auto-labelling
  • Data loss prevention (DLP) policies
  • Message encryption
  • Data classification and scanning

What you get

  • A label taxonomy and policy set
  • A staged rollout plan
08

Microsoft 365 administration

The everyday Microsoft 365 platform your organisation runs on, configured properly and kept in good order.

What we do

  • Tenant setup and licensing
  • Exchange Online, SharePoint and Teams
  • Tenant-to-tenant migrations
  • Security baselines

What you get

  • A configured, documented tenant
  • An admin handbook

Not sure where
to start?

info@kinstacktech.com Book a consultation