Cloud, security, helpdesk.
Still working Tuesday.
Migrations, patching, the VPN nobody trusts. Calgary and Western Canada teams usually find us after “good enough” stopped being good. You get a number that rings a desk here, not a portal lottery.
Honest IT scope. One invoice for our time.
Typical week: half-finished Intune tenant, file share limping on a VM, SaaS nobody audited, firewall firmware three releases behind. We untangle it, write it down, then keep the lights on.
Cloud & migrations
Seen enough lift-and-shift weekends to know where the bodies are buried. Cutovers land after hours when we can help it.
Cutover war storiesSecurity & hardening
MFA that sticks, logs you can grep, tabletop before the auditor lands. SOC 2-shaped work when you need the paperwork to match reality.
Security, non-magic editionManaged IT & helpdesk
Imaging laptops, onboarding hires, printers that hate everyone. SLAs spell out when a human answers, not “priority 3.”
Ticket realityAutomation & AI support
Script the boring onboarding steps first. Copilots where they shave real minutes off finance or support. No “AI transformation” deck required.
Automation we have shippedDevOps & release hygiene
Pipelines, Terraform modules, staging that is not fiction. Goal is boring deploys. Friday heroics cost extra and nobody wants them.
Release hygieneBackup & recovery
Backups nobody is afraid to restore. Drills on the calendar, not “someday.” Runbooks live in the repo, not in Greg’s head. Greg goes on vacation too.
Restore drillsApps & integrations
Internal tools, customer portals, the ugly CSV-to-ERP bridge. We pick stacks your next hire can grep without crying.
When build makes senseMonitoring & on-call
Dashboards your team opens on purpose. Paging rules tuned so disk-at-92% does not wake five people. Postmortems plain enough for legal.
On-call setupWe are not the cheapest ticket. We are the one you keep.
Alberta clinics, builders, logistics, small software shops. They stick around because someone owns the awkward middle: between “we should really fix that” and shipped.
- Discovery calls skip the BDR script. Engineers show up early.
- Calgary-area site visits when a rack or wiring needs eyes.
- Statements split labour, cloud usage, licences. No mystery blob.
- Canadian regions default. Anything offshore is written down on purpose.
Vendor logos are cheap. Keeping them patched is not.
Same tools we run for clients: Terraform state in git, Datadog paid for with real money, licences tracked in a spreadsheet nobody loves but everyone uses.
Paper trail beats vibes. You see the next step.
Diagrams, access lists, rollback notes live in your repo or ours. If the fit is wrong we say it in week one, not month four.
Kickoff & inventory
Passwords, dependencies, the thing that kills revenue if it blinks. Calls first, on-site when the closet smells like burnt PDU.
Plan & pricing
Written proposal: phases, owners, weekly check-ins, definition of done. Cloud dollars split out from our hours so finance can reconcile.
Build & cutover
Night-of schedule posted in Slack before anyone orders pizza. Smoke tests, rollback, someone owns comms to the business.
Operate & tune
Patching, capacity, cost nags, the fixes too small for a project ticket. Steering monthly or quarterly, your call.
Three snapshots. Names changed where we had to.
Figures came from the engagements they describe; rounding happens.
Clinic group stabilized VPN and EMR access
Split tunneling fixed, MFA people did not fight, circuit monitoring so we stopped blaming the office Wi-Fi.
VPN + EMR notes
Eight stores, one Azure landing zone
Inventory off a tired VM, geo-redundant blob backups, finance stayed on the old ERP connector on purpose.
Store rollout log
Dispatch API stopped falling over at month-end
Autoscaled on queue depth, noisy neighbour boxed out, load test on staging that was not a laptop.
Sketch + metricsAfter the shiny kickoff wears off.
“AWS bill was basically random each month. They tagged the mess, set budgets, now finance stops asking me what a ‘data transfer’ line is. Small win, loud relief.”
“Three IT people in three years. Northcloud picked up a half-done Intune job and actually closed it. New hires stopped getting laptops that ‘work tomorrow.’”
“Vendor breach next door; we stayed clean. They sat with legal, did the boring restore test after. Same time zone mattered. No waiting on a handoff deck from overseas.”
Retainers for our hours. Pass-throughs stay obvious.
Cloud invoices ride through without markup. If scope drifts, we redraw the agreement instead of eating hours in silence.
Helpdesk, patching, printers that behave when they feel like it. Roughly twenty-five seats before we need to talk tier.
- Up to ~25 managed endpoints
- Business-hours helpdesk (Mountain Time)
- Patch reporting & basic monitoring
- Monthly health summary email
- Backup monitoring (client-owned tools OK)
Endpoints plus a block of cloud engineer time each month. For teams already paying Azure and still nervous about prod.
- Up to ~100 endpoints
- Extended hours + optional 24/7 paging add-on
- Monthly cloud engineering hours included
- SIEM/log review aligned to your risk profile
- Quarterly steering (roadmap, spend, risks)
- Annual restore test included
Fractional platform lead, ugly compliance timelines, multi-region. SOW plus retainer; nothing heroic billed as “included.”
- Dedicated weekly hours & backlog ownership
- Custom SLAs and escalation trees
- Regulated or multi-tenant environments
- Automation / internal tooling builds
- Hybrid on-prem + cloud retained expertise
- vCIO-style planning when you want it
FAQ without the sales varnish.
Postmortems, migrations, stuff we filed wrong once.
SOC 2 evidence auditors keep asking us to resend
Copilots that paid off vs. ones we rolled back
Messy stack? Fine. We will say if it is us or not.
VPN flaps, surprise invoices, patch debt. If it is outside what we do well, we will nudge you somewhere else. No ghosting.