MICROSOFT 365 &HYBRIDINFRASTRUCTURECONSULTING
Helping enterprise organisations design secure, scalable Microsoft cloud environments through hybrid identity, security architecture, and infrastructure modernisation.
Trusted by Enterprise
Ericsson
Microsoft
European Commission
Körber
Richemont
Metro Lisboa
European Patent OfficeStructured Delivery.
Documented Outcomes.
Every engagement follows a controlled delivery model with documented outputs and rollback procedures — so your team can operate everything after I leave.
Evidence Pack on Every Engagement
Every sprint closes with a complete audit package — architecture diagrams, before/after configuration exports, operational runbook, and compliance report.
Enterprise Remote Delivery
Delivered to Ericsson, the European Commission, and Microsoft from Lisbon — timezone-flexible, async-capable via Teams, CAB-aligned change windows.
Rollback Plans Included
Every cutover ships with a tested rollback procedure. 48h revert window post-cutover. No change goes live without a documented revert path — standard, not optional.
Fixed-Scope. Fixed-Price. Defined Outcomes.
Each engagement is time-boxed with clear deliverables agreed upfront — no surprises, no scope creep.
M365 Security Assessment
Comprehensive review of your Microsoft 365 tenant security posture — identity, email, endpoints, and compliance gaps — with a prioritised remediation roadmap.
- Tenant health report
- Security score analysis
- Remediation roadmap
- Executive summary
Zero Trust Hardening Sprint
Hands-on implementation of Zero Trust controls across Conditional Access, MFA enforcement, privileged identity, and device compliance policies.
- Conditional Access policy set
- PIM configuration
- Device compliance baseline
- Runbook + rollback plan
Hybrid Identity Review
Deep-dive into your Azure AD Connect / Entra ID sync configuration, identifying replication issues, stale objects, and misaligned attribute flows.
- Sync health report
- Attribute mapping audit
- Object cleanup list
- Architecture recommendations
Migration Readiness Assessment
Pre-migration analysis of your Exchange or file server environment — mailbox sizes, dependencies, coexistence risks — before any cutover begins.
- Migration inventory
- Risk & dependency map
- Cutover runbook
- Rollback procedures
What Clients Say
Carlos brought a level of architecture rigour we rarely see from external consultants. Every change was documented, every rollback was pre-tested. We went from a fragmented endpoint estate to a fully enforced Zero Trust posture — with zero disruption to the business.
The Exchange 2019 deployment was the cleanest infrastructure project we have run in years. Zero mail loss on cutover, PKI rebuilt end-to-end, and a full handover runbook our team could actually use the next day.
Standardising Intune and Defender across 20+ subsidiaries is the kind of project that usually takes 18 months and three vendors. Carlos scoped it, delivered it in sprints, and left runbooks that our subsidiary IT teams could follow independently.
What I Deliver
Structured engagements with defined outcomes, evidence packs and rollback plans. Remote delivery, sprint-based.
Case Studies
Real enterprise engagements. Problem → Architecture → Implementation → Results.
Carlos Annes
Microsoft 365 · Hybrid Identity · Infrastructure
Microsoft infrastructure architect specialising in hybrid identity, security architecture, and large-scale Microsoft 365 migrations. Based in Lisbon, delivering remote-first engagements to enterprise organisations across Europe.
Enterprise programs delivered for Ericsson, the European Commission, Metro Lisboa, and Körber — covering security transformation, hybrid identity architecture, and global tenant standardisation. Prior to independent consulting, served as O365 and Exchange Support Engineer at Microsoft.
Ready to modernise your Microsoft environment?
Book a no-obligation discovery call. I'll review your current setup, identify quick wins, and outline a structured engagement with defined outcomes — before any contract is signed.
No commitment required · Remote delivery · Response within 24 hours