01 / 04
Identity & Access
Phishing-resistant authentication, privileged access redesign, and Entra ID governance – built on zero-trust principles and aligned to recognised security baselines.
See detail
Independent Microsoft Cloud Practice
Structure,
Structure,
from complexity.
Nebulae Solutions is a specialist Microsoft cloud consultancy delivering identity, endpoint, and architecture work to enterprise standard – end-to-end, fully documented, at senior level throughout.
Services · 01
Four disciplines, one practitioner.
Specialism over breadth. Engagements are scoped within these areas and delivered end-to-end – architecture, implementation, documentation, handover.
02 / 04
Endpoint Security & Application Control
Intune-led endpoint management with application control and Defender integration – Windows and macOS, configured to a documented baseline.
See detail
03 / 04
Cloud & Automation
Azure architecture and governance through to PowerShell and Graph automation – landing zones, networking, and migration at one end, versioned reviewable scripting at the other.
See detail
04 / 04
Design & Documentation
Architecture artefacts written to senior-review and change-board standard. The deliverable is not the deck – it is documentation a successor engineer can actually use.
See detail
Approach · 02
How the work actually arrives.
A consultant’s discipline with an engineer’s precision. Formal workstreams, defined scope, documented outcomes – work that stands up to senior technical and governance scrutiny: security, IT, and change-board review alike.
01
Senior from first call to handover.
One practitioner across discovery, design, build, and handover. No junior hand-off, no learning on your time, no escalation to "someone more senior" – that is who you are already talking to.
02
The documentation is the deliverable.
Every engagement leaves artefacts your teams can actually use – structured, classified, and written for whoever reads them next: a change board, a successor engineer, your auditors.
03
Inside your process, not alongside it.
Work runs through your change control, your tooling, and your tickets – and alongside the teams who own the systems. The objective is a clean handover, not a dependency on me.
Technologies · 03
The right toolset.
A focused set of platforms, languages, and frameworks – chosen to match the depth each engagement needs, not padded for breadth. Microsoft at the core, with the specialist tooling a brief occasionally calls for.
Identity & Access 01
- Microsoft Entra ID
- Conditional Access
- Azure PIM
- Windows Hello for Business
- Platform SSO
- Microsoft Authenticator
- Azure Key Vault
Endpoint 02
- Microsoft Intune
- Windows Autopilot
- Defender for Endpoint
- WDAC / App Control
- LAPS
Cloud & Automation 03
- Microsoft Azure (Landing Zones, networking)
- Azure Virtual Desktop / W365
- Bicep / ARM
- PowerShell
- Microsoft Graph API
- KQL / Advanced Hunting
- Microsoft Sentinel
AI-Assisted Delivery 04
- LLM-augmented automation & documentation
- Claude Code
- Microsoft Copilot / Security Copilot
- Prompt & workflow engineering
- Agentic tooling for repeatable delivery & audit tasks
Aligned to 05
- CIS Benchmarks L1
- NCSC Guidance
- ISO 27001 alignment
- Cyber Essentials / CE+
- Zero Trust principles
- CAB / ITIL
About · 04
A practice of one.
Nebulae Solutions is operated by Andy Wills – a Solutions Architect with over a decade of enterprise delivery experience across identity, endpoint, and Microsoft cloud.
The practice works exclusively at the architecture and advisory layer – not general IT support, not body-shop delivery. Engagements are taken on selectively, typically through managed service providers embedding senior delivery resource into complex security uplift programmes, or directly with mid-market and enterprise clients.
Audiences are usually senior security, IT, and operations leadership – and the delivery teams whose environments the work touches. Outputs range across the full design and governance lifecycle: architecture and design, configuration and handover, change and governance, end-user adoption. HLDs, LLDs, and CRDs are typical – the format follows the audience. Substance is the differentiator.
PORTRAIT · ANDY WILLS
Contact · 05
Start a conversation.
For new engagements, partner introductions, or scoping conversations on existing programmes.
Currently booking · Q3 2026 onwards
Engagements are typically scoped over a one-call discovery and confirmed in a short written proposal. Response within one working day.