One engineer, start to finish
The person on your scoping call is the person who configures your systems. No account managers, no handoffs, no offshore subcontracting.
Identity Access Management, Device Posture and IT Security for teams that need it most.
We deliver Zero Trust architecture, security hardening, NIST and CIS frameworks, identity and access management, SOC 2 compliance, JAMF MDM enforcement, Okta IAM build-outs, endpoint security, least-privilege access, zero-touch deployments and integrity.
Work one-on-one with a senior security engineer, not an account manager or a ticket queue. You get the frameworks, hardening and documentation your team keeps, at a fixed price agreed before anything starts.
SSO & MFA StarterExample engagement
Connect Slack, Zoom and Notion to single sign-on
SSODoneEnforce MFA for every user
Policy rollout, pilot group firstIn progressHand off admin guide and staff guide
HandoffTo do$200 an houror a fixed price per package
Remote, or onsite worldwideNYC, CT, RI and MA locally; travel billed elsewhere
Monday to Friday, 7am to 6pmconsultations available
Works with the platforms your team already uses
- Okta
- Google Workspace
- Microsoft Entra ID
- JAMF
- Kandji
- Apple Business Manager
- Intune
- Vanta
- Drata
Work with the engineer, not a middleman
Fortis is a security engineering consultancy. You hire a senior engineer who scopes the work, builds it in your systems and hands it over, so nothing gets lost between a salesperson, a project manager and whoever ends up doing it.
Built on real frameworks
Work is mapped to NIST CSF, NIST 800-207 Zero Trust, CIS Benchmarks and SOC 2 controls, so it holds up in an audit or a customer security review.
Hardening you can see
A before-and-after report: what we found, what we changed, and what's left, ranked by risk, so you know exactly what you paid for.
Yours to keep
Runbooks, admin guides and scripts handed over at the end, so your team can run everything without calling us.
Services
Fixed-fee engagements for growth-stage companies heading toward SOC 2 or enterprise customer requirements. Each one is scoped, built and handed over by the same engineer, mapped to a recognized framework, and documented so your team can run it.
Zero Trust architecture
A current-state security audit mapped to NIST 800-207, then an identity-first access model that removes implicit network trust and reduces your attack surface.
Okta IAM build-out
Full Okta configuration: SSO integrations, MFA enforcement, lifecycle automation and provisioning policies, including offboarding automation with PowerShell.
JAMF MDM deployment
Zero-touch macOS and iOS enrollment through JAMF Pro and Apple Business Manager, with conditional access, configuration profiles and device trust for remote-first teams.
SOC 2 readiness
SOC 2 Type I and II readiness from end to end: policy documentation, evidence collection, access review reports and audit-trail configuration mapped to ISO 27001.
Automation and runbooks
PowerShell and Bash scripts for onboarding, offboarding, patching and endpoint provisioning, with documented runbooks your internal team can operate.
Cloud IAM and Entra ID
Microsoft Entra ID configuration, Google Workspace GAM integration and SaaS access control, so identity across your cloud stack follows one set of policies.
Trusted by growing teams
Identity-first security grounded in NIST 800-207 Zero Trust principles, built to leave your team with documentation and automation it can run on its own.
9+Years in IT, infrastructure and identity security
500Endpoints managed across hybrid Windows and macOS fleets
5Certifications, including JAMF 200, Okta Admin and Google IT Automation
4Industries served: SaaS, healthcare, R&D and enterprise IT
It was a turbulent start at first — we were in the midst of reorganizing. [He] was able to hit the ground running, identifying critical issues and quickly resolving bottlenecks.
Our engineering team has benefited greatly from Fortis Identity's expertise. He is an excellent collaborator. Attentive, fast-moving, and brings a level of infrastructure maturity that most early-stage companies don't get access to until much later.
It was a bittersweet transition when [he] departed. He was a great mentor for student interns and staff globally — from Boston to Tokyo, we will miss him from across all corners of the world.
Packages and pricing
Clear scope, fixed price, no surprises. Every package is priced from a $200 hourly rate, so you know what you're paying before work starts.
$200an hour
Need something that isn't listed? Hourly work is billed in 30-minute increments with a 1-hour minimum. Remote anywhere, onsite in NYC, CT, RI and MA, and onsite across the US or abroad with travel costs covered by the client.
Book a free 20-minute callPricing disclosure: Prices shown are for Series A companies. Pricing for Series B to D and IPO-stage companies may vary and is quoted after a free scoping call.
Identity & Workspace Health Check
For teams on Google Workspace or Microsoft 365 that have never had a security review.
$600
Fixed price, about 3 hours
- Review of admin roles, MFA coverage and external sharing
- Finds ex-employee and stale accounts still active
- Email security check (SPF, DKIM, DMARC)
- Written report ranked by risk, plus a 30-minute walkthrough
- Fee credited toward any package booked within 30 days
Most popular SSO & MFA Starter
For teams juggling separate passwords for every app.
$2,000
Fixed price, about 10 hours
- Okta or Google set up as your single sign-on
- SSO for up to 5 apps (Slack, Zoom, Notion and so on)
- MFA enforced for every user
- Admin guide and a one-page guide for your staff
Onboarding & Offboarding Automation
For teams where new hires wait for access and leavers keep it.
$1,600
Fixed price, about 8 hours
- Automatic account creation for new hires
- Same-day removal of access when someone leaves
- Provisioning (SCIM) for supported apps
- Step-by-step runbook your team can follow
Zero-Touch Mac Fleet
For remote or hybrid teams with up to 25 Macs.
$3,000
Fixed price, about 15 hours
- JAMF or Kandji connected to Apple Business Manager
- New Macs ship straight to staff and set themselves up
- Baseline security: disk encryption, firewall, updates, screen lock
- Device inventory and lost-device lock or wipe
SOC 2 Access-Control Readiness
For startups preparing for a SOC 2 audit or an enterprise security review.
$4,000
Fixed price, about 20 hours
- Identity and device controls mapped to SOC 2 requirements
- Access review process with evidence your auditor can use
- MFA, onboarding and offboarding evidence collected
- Works alongside Vanta, Drata or your auditor
Ongoing support
Your part-time IT and security engineer, without the full-time hire.
Essentials
$1,000a month
5 hours a month for access requests, new hires and leavers, app and device issues, and monthly account cleanup.
Request EssentialsGrowth
$2,000a month
10 hours a month: everything in Essentials plus quarterly access reviews, security improvements and a monthly check-in.
Request GrowthHourly
$200an hour
One-off fixes, troubleshooting, migrations and advice. 1-hour minimum.
Book hourly workFree 20-minute call
You talk to the engineer who would do the work, not a salesperson.
Written scope
A fixed price and timeline before anything starts.
The work
Built by that same engineer, remotely or onsite, with progress updates.
Handoff
Runbooks and a walkthrough so your team can run it.
Listed prices apply to Series A companies; Series B to D and IPO-stage companies may be priced differently. Prices assume a typical small-team setup. Larger or more complex environments are quoted at $200 an hour after a free scoping call. Onsite work is available anywhere in the US and internationally. Outside NYC, CT, RI and MA, the client covers airfare, lodging, ground transport and daily expenses at cost, agreed in the written scope before booking.
About Fortis Identity
Fortis Identity is a security engineering consultancy for identity, devices and Zero Trust. Clients work directly with a senior engineer who designs, builds and documents their security controls, from the first call to the handoff, without the cost of a full-time hire.
Our lead engineer brings 9+ years of experience building identity-first, least-privilege access systems across enterprise environments, specializing in Okta-driven IAM, JAMF endpoint management and SOC 2 compliance readiness.
We work with small businesses and Series A–C companies. You get architecture, hands-on engineering and compliance in one engagement with one engineer, instead of three separate consultants.
- Okta administration
- Microsoft Entra ID
- Google Workspace
- JAMF and Kandji
- Intune
- Apple Business Manager
- Android Enterprise
- NIST CSF and Zero Trust
- SOC 2
- Splunk and SIEM
- Cloudflare and Zscaler
- Python, Bash and PowerShell
- Founded
- 2022
- Experience
- 9+ years, in IT since 2017
- Technologies
- Okta, JAMF, URI, Microsoft Entra ID, AWS, Microsoft Azure
- Service area
- Remote anywhere. Onsite in NYC, CT, RI and MA, and across the US and worldwide; the client covers travel, lodging and daily expenses.
- Rate
- $200 an hour, or fixed-price packages
- Availability
- Monday to Friday, 7am to 6pm
Talk to the engineer who will do the work
Book a free 20-minute call or send a message. You'll speak with an engineer, not a salesperson, and get a written scope and fixed price before any work starts.
Contact us
- Phone
- +1 (774) 214-0420
- Book a free call
- Pick a time on Calendly
- Service area
- Remote anywhere. Onsite in NYC, CT, RI and MA, and nationwide or worldwide with travel, lodging and daily expenses billed to the client.