Enterprise-proven
In enterprise infrastructure since 2013, from systems engineer to senior cloud engineer.
AH Gazi // Cloud & Modern Workplace Consultant
Cloud and workplace infrastructure, engineered properly.
PROMISE:Plan.Secure.Run.
I help growing businesses plan, migrate, secure and run Microsoft 365, Google Workspace, Azure and Google Cloud, with the discipline of more than a decade in enterprise IT operations and the accountability of working directly with the engineer doing the work.
3× Microsoft Certified ExpertSecurity, Microsoft 365, DevOps
Since 2013in enterprise infrastructure
Multi-cloud certifiedAzure, Google Cloud, AWS
DNS // example.comALL CHECKS PASS
SPFv=spf1 include:spf.protection.outlook.com -all
PASSDKIMselector1 · selector2 · 2048-bit
PASSDMARCp=reject · aggregate reports on
ENFORCEDMTA-STS & TLS-RPTmode: enforce
ONDNSSECzone signed · registrar locked
OKThe target state for an email and domain engagement: authenticated, enforced and documented.
ENTRA ID // CONDITIONAL ACCESSBASELINE
Require MFA for all usersall cloud apps
Block legacy authenticationIMAP · POP · basic auth
Compliant device for adminsIntune compliance required
Restrict risky sign-insrequire password change
Emergency access accountsexcluded · monitored
BREAK-GLASSA baseline policy set, rolled out in report-only mode first so nobody gets locked out.
MONITORING // APP-WEB-01HEALTHY
DB-01Linux · disk, memory, service checks
HEALTHYNightly backupverified restore point
SUCCESSTLS certificate*.example.com
RENEW SOONMonitoring that warns you before your users notice.
VIEW: EMAIL & DOMAIN // AUTHENTICATED + ENFORCEDILLUSTRATIVE
Certified credentials
Cybersecurity Architect Expert
Enterprise Administrator Expert
DevOps Engineer Expert
Azure Administrator
Identity & Access Admin
Google Cloud Associate Cloud Engineer
AWS Solutions Architect
Verify
01 // The practice
Enterprise discipline, delivered personally.
Most growing businesses don't have an enterprise IT department. They still deserve infrastructure that's planned, secured and documented to that standard.
I'm a senior cloud engineer with more than a decade inside enterprise infrastructure. Through this practice I bring the same rigour to SMBs, startups and lean IT teams, and you work with me directly, from the first call to handover.
Certified at expert level
Three Microsoft Certified Expert credentials, plus Azure, Google Cloud and AWS credentials.
Security by default
MFA, least privilege, email authentication and backups are part of the build, never upsells.
Documented & accountable
A written scope before work, documentation and handover after. You deal with the engineer.
02 // Services
Six focused services. One accountable engineer.
Modern Workplace
Microsoft 365
Set up, migrate, secure and manage Microsoft 365 so email, files and Teams simply work, and stay secure.
- Tenant setup, clean-up and licensing
- Exchange Online migration
- Security baseline, Teams and SharePoint structure
Modern Workplace
Identity, Access & Devices
The right people, on the right devices, with the right access.
- MFA & Conditional Access
- Hybrid identity & SSO
- Intune device management
Cloud
Cloud Infrastructure & Migration
Move to Azure or Google Cloud with a plan, a rollback path and a governed foundation.
- Readiness assessment
- VM & server migration
- Backup, DR & cost hygiene
Modern Workplace
Google Workspace
Administer, secure and migrate Workspace, including moves to and from Microsoft 365.
- Admin & OU structure
- 2-Step Verification & sharing
- Platform migrations
Security & Ops
Domain, DNS & Email Security
Clean DNS, Cloudflare, SSL/TLS and SPF, DKIM and DMARC taken to enforcement.
- DNS audit & clean-up
- Cloudflare onboarding
- DMARC to p=reject
Security & Ops
Infrastructure Operations & Monitoring
Healthy servers, VMs and networks, with alerts before users notice.
- Monitoring & dashboards
- Patching & hardening
- Ongoing administration
Best place to start
Assessments & health checks
Not sure where to start? A fixed-scope review of your Microsoft 365, Google Workspace, cloud or email setup, with a prioritised, plain-English report and a walkthrough call.
Email & Domain Health CheckM365 Security ReviewWorkspace ReviewCloud Environment Review
See assessments
03 // How engagements run
Plan. Secure. Run.
The same discipline whether it's a DNS clean-up or a full migration. Nothing changes in your environment until the plan is agreed.
PHASE 01 // DISCOVER & SCOPE
Plan.
I learn your environment, constraints and what "done" means to you, then put the scope, approach, risks and rollback in writing before anything changes.
Environment reviewWritten scopeRollback plan
PHASE 02 // IMPLEMENT & VALIDATE
Secure.
Changes are made in controlled stages, with security built in and you kept informed. Every step is tested against agreed checks. Nothing is "done" until it's verified.
Staged changesSecurity baselineValidation
PHASE 03 // HAND OVER & SUPPORT
Run.
You get documentation, admin notes and a walkthrough, so your environment never depends on one person's memory. Ongoing support is available if you want it.
DocumentationHandoverOngoing support
04 // Selected work
Real engagements, described honestly.
Client names and identifying details are withheld where confidentiality applies. The technical work is not.
Migrating on-premises email to Exchange Online
A legacy mail system moved to Exchange Online for reliability, stronger security and room to grow.
Read case study
A Zero Trust baseline with Defender XDR and Sentinel
Identity-based access and integrated threat detection across cloud and on-premises systems.
Read case study
Unifying on-premises and cloud identity
Hybrid Active Directory with Entra ID: one identity per person, single sign-on and Conditional Access.
Read case study
Centralising threat monitoring with Microsoft Sentinel
Real-time detection, continuous monitoring and automated response playbooks in one place.
Read case study05 // Where are you today?
Find the right starting point.
Pick the situation closest to yours to see how an engagement would usually be shaped.
Typical combination // Cloud Environment Review + Migration
Ageing servers, and a decision to make about Azure or Google Cloud.
We start with a readiness assessment: what to move, rebuild, replace or retire, and what it will cost to run. Then we design a secure foundation and migrate workload by workload, each with its own rollback.
Readiness assessmentLanding zoneVM migrationBackup & DR
Typical combination // M365 Security Review + Identity baseline
A tenant that grew piece by piece, and nobody's sure how it's configured.
A security and configuration review shows what matters most, in priority order. Then we roll out MFA and Conditional Access safely, tidy admin roles and sharing, and leave you with documentation.
Security reviewMFA & Conditional AccessAdmin rolesSharing policy
Typical combination // Email & Domain Health Check + DNS project
Emails landing in spam, or someone spoofing your domain.
A health check maps every DNS record and mail sender. Then SPF and DKIM get fixed for every legitimate sender, DMARC moves from monitoring to enforcement, and your registrar is locked down.
DNS inventorySPF · DKIMDMARC enforcementCloudflare
Typical combination // Health review + Ongoing support
Finding out something's down only when someone complains.
A health review of servers, backups, patching and network rules, then monitoring and alerting tuned to the signals that matter, plus a patching routine. Ongoing administration is available afterwards.
Health reviewMonitoring & alertsPatchingMonthly support
AH GaziSenior Cloud Engineer · Consultant
06 // Who you'll work with
Meet AH Gazi.
I'm a cloud and modern workplace engineer based in Dhaka, Bangladesh, working with clients internationally. My career has been spent inside enterprise infrastructure, where reliability isn't optional and every change needs a plan.
Through this consultancy I bring that same discipline to businesses without an enterprise IT department, and to IT teams that need an extra senior pair of hands.
- 2013Support engineer
- 2015Systems engineer
- 2023Senior hybrid cloud engineer
- 2025Senior cloud engineer
07 // Client feedback
What clients say about working with me.
Verified reviews from Upwork and Fiverr. Each card shows the type of project it refers to.
"His attention to detail and professionalism are super, while his proactive communication and prompt delivery make every project seamless. Having him as an extension of my team allows me to tackle more work."
"Amazing job with Gazi again. It's not the first work together. He's always in time, super available and the results are wonderful. Highly reccomended."
"Gazi is honestly one of the best Fiverr sellers I have ever worked with, and I have worked with quite a few. He seems to be online literally at any point of the day and produces high quality work. Excellent!"
Prefer marketplace protection? You can also hire me on Upwork or Fiverr.