All work

Policy 07Healthcare RCM (in-house)Security & Compliance

Enterprise remote-access security

Policy path. Signal: Remote user starts a VPN connection. Decision: Entra ID SAML sign-in with Conditional Access. Controls: Require MFA and an Intune-compliant device; Grant Tunnel to permitted routes; Block Unmanaged devices. Outcome: Remote access tied to identity and managed endpoints.

If The challenge

Remote access required alignment between authentication, endpoint controls, certificate configuration and network routing.

Then The solution

Architected and implemented FortiGate and Palo Alto remote-access VPN integrated with Microsoft Entra ID SAML authentication, alongside Conditional Access, Intune and endpoint security controls.

Result Outcomes

  • Integrated remote access with identity-based authentication
  • Considered certificate lifecycle, routing and tunnel design
  • Aligned VPN deployment with managed endpoint controls

Related evidence

All work

Policy 01Software development & IT services

Enterprise identity security and Conditional Access

If
Engineering teams accessed corporate resources from unmanaged endpoints, legacy authentication remained available, and…
Then
Redesigned Conditional Access, planned and implemented a staged retirement of legacy authentication, strengthened MFA…
Result
Reduced unmanaged endpoint exposure
  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • Device compliance

Policy 02Multi-location professional services

Identity protection and email domain security

If
MFA enforcement and privileged access required improvement, while email authentication records needed strengthening…
Then
Implemented staged Conditional Access improvements, addressed legacy authentication dependencies, and strengthened…
Result
Standardised MFA enforcement and privileged-access boundaries
  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • SPF

Policy 03Healthcare & diagnostics

Secure access for shared clinical and laboratory workstations

If
Shared workstations used across shifts in clinical and laboratory settings created challenges for sensitive application…
Then
Designed Conditional Access for shared-device scenarios, including session restrictions, reauthentication for sensitive…
Result
Strengthened access restrictions for shared endpoints
  • Conditional Access
  • Microsoft Entra ID
  • MFA
  • Session controls

Contact

Let's talk about secure Microsoft cloud work.

↑↓ to move · Enter to open · Esc to close