Security architecture review
Independent assessment of design decisions, trust boundaries, controls and operational risks.
Review this serviceSecurity architecture is only useful when teams can operate it and systems can live with it.
I’m George Kuznyetsov. I help organizations examine complex security challenges across infrastructure, cloud identity and connected environments — and publish practical lessons engineers can apply.
Independent consulting enquiries welcome · Based in Toronto · Remote collaboration
Focused reviews and advisory work, not a vague promise to solve every security problem. Start with the architecture, evidence and business constraints you already have.
Independent assessment of design decisions, trust boundaries, controls and operational risks.
Review this serviceAD and Entra identity security, access lifecycle, MFA strategy and control validation.
Review this serviceArchitecture-level guidance for connected building and distributed operational environments.
Review this serviceThe technical work is public when it can safely be shared. The commercial work starts with a conversation.
Checklists, validation workflows, architecture notes and security labs. Less buzzword recycling, more assumptions, test cases and limitations.
Explore the guidesNeed an independent set of eyes on identity, infrastructure or a security design? Begin with an explicit scope and a useful deliverable.
Discuss an engagementExamples from professional experience are presented at a safe level of abstraction, without client-owned diagrams, credentials or confidential implementation detail.
Rethinking a delayed identity onboarding/offboarding workflow with automation and repeatable handoffs.
Explore selected workBalancing architecture, visibility and operational realities in connected building environments.
Explore selected workCurrent work that tests assumptions, not marketing demos. Research status and synthetic fixtures are made explicit.
Investigating how agents should validate evidence, preserve provenance and avoid unsupported compromise claims.
Explore research ↗AD / Entra security and health assessment, with an emphasis on repeatable checks and explainable findings.
Explore project ↗Useful security work can be reproduced, challenged and improved. Start with one complete, openly available technical guide.
A practical checklist for validating security investigation claims when AI and automation are involved. Includes negative tests and a sample evidence contract.
Read the practical guideUnderstand the system, define the trust boundaries, identify what can actually be tested, and be explicit about what remains uncertain.
How I approach the work ↗Send a short description of the environment, the challenge and your timeline. I'll respond personally if there is a fit.