Consulting

Graywind Consulting

I help early-stage companies build cloud infrastructure that holds up under a security review. When a bank, an enterprise customer, or a SOC 2 auditor asks how your systems work, you have the answer and the evidence.

I’m a staff-level cloud engineer focused on AWS and Google Cloud. I spent years at managed service providers, including 2nd Watch and Defiance Digital, designing and building out infrastructure for companies from single-digit startups to the Fortune 500.

Who this is for

  • Founders who sell to regulated buyers, such as banks, fintech companies, and large enterprises.
  • Teams that need SOC 2 Type 1 now and Type 2 next.
  • Small engineering teams without a dedicated platform or security engineer.

What I do

Build work has a fixed scope and a fixed price, so you know the cost before we start. Audit and security review support is a monthly retainer.

Cloud foundation

Account structure, identity and access, networking, infrastructure as code, CI/CD, logging, and monitoring. I build it so the controls SOC 2 asks about are already in place on day one.

SOC 2 readiness

I implement your controls and connect your cloud accounts and code repositories to tools like Vanta, so evidence is collected automatically. That gets you ready for a Type 1 audit, and then keeps your controls running through the Type 2 observation window.

Security assessment

A review of your current cloud environment against established benchmarks, such as the CIS Benchmarks or the security pillar of the AWS Well-Architected Framework. You get findings ranked by risk, and I can fix them for you.

Audit and security review support

A monthly retainer for the compliance work that continues after launch. I answer customer security questionnaires, make the changes that bank and enterprise reviews ask for, and support your annual audit.

Safe AI-assisted development

I use AI agents in my own work, which makes delivery faster. I also set up AI-assisted development for your team so agents run in isolated environments, away from production credentials. Your engineers keep the speed, and an agent mistake stays small.

Background

Get in touch

Email mike@graywind.org. Tell me where you are now and what sets your timeline, such as a customer deal or an audit date. I take on a small number of clients at a time.