Managed Cloud · Azure · Compliance
I run the Managed Cloud team at Sitecore, turning bespoke Azure engineering into repeatable services for regulated platforms. This is where I write about what makes that work: productising managed services, the AI automations that actually pay for themselves, and keeping an estate compliant and affordable at the same time.
PCI DSS v4.0.1 has been fully enforced for a while now. These are the three things I keep finding on regulated Azure estates that fail an audit – network segmentation, log retention and key rotation – and how I deal with each one in Azure.
Earlier writing from my Sitecore and .NET years — kept here for reference.
