Skip to main content

Services

Microsoft 365 consulting in Perth & WA

Process digitalisation, in-house SharePoint applications and complete data, device and communication security, delivered on-site across Perth and Western Australia, and remotely Australia-wide.

Start a conversationSee the work

What I do

Ten areas I work across

Turning manual processes into systems

Data & Process Digitalisation

If a process in your organisation runs on a Word template, a shared spreadsheet and a chain of emails, it is costing you time, accuracy and audit confidence. I rebuild those processes as structured systems in SharePoint and Power Automate, the request, the approval, the record, the notification and the report all in one place.

  • Process discovery and mapping of how the work is really done
  • SharePoint list architecture with indexing that survives tens of thousands of rows
  • Role-based forms so each person sees only what applies to them
  • Approval routing with delegates, escalation and fallback approvers
  • Automatic receipts, reminders and chase-ups
  • Reporting and export for finance, funders and auditors
  • Written manuals, role guides and change logs at handover

SPFx apps built for your tenant

In-House SharePoint Applications

When a list and a form are not enough, I build custom SharePoint Framework web parts, real applications that run inside your SharePoint sites, honour your permissions and need no additional platform.

  • Custom SPFx web parts deployed through your tenant app catalogue
  • Role-aware interfaces for requesters, approvers, finance and administrators
  • Item-level security so records are visible only to the right people
  • Versioned releases with an in-app change history
  • PnP PowerShell provisioning scripts so the build is repeatable
  • No Power Apps premium licensing required

Work that happens without being chased

Power Automate Workflow Automation

Scheduled flows, event-driven flows and approval flows that handle the routine so your team does not have to, built with the timezone handling, batching and failure alerting that keep them running past the first month.

  • Approval, notification and escalation flows
  • Scheduled daily and monthly jobs with correct Perth timezone handling
  • Expiry, renewal and compliance reminders
  • Microsoft Forms and Teams triggered automation
  • Outlook-safe templated emails that render properly for every recipient
  • Flow failure alerting so a silent breakage does not go unnoticed

Knowing where your records are

Data Security & Governance

Microsoft Purview and Microsoft 365 governance so sensitive information is labelled, retained, restricted and auditable, which matters especially for health, community and funded services.

  • Sensitivity labelling and data classification
  • Retention policies aligned to your records obligations
  • Data loss prevention for email, Teams and SharePoint
  • Audit and activity reporting
  • External sharing and guest access review
  • Identity and permission clean-up across SharePoint and Entra ID

Every device known, managed and hardened

Device & Endpoint Security

Microsoft Intune and Defender across Windows, Android and iOS, from enrolment through to compliance enforcement, encryption, patching and application delivery.

  • Intune enrolment for Windows, Android and iOS fleets
  • Compliance policies enforced through Conditional Access
  • BitLocker encryption and recovery key escrow
  • Security baselines and ASD Essential Eight hardening
  • Windows Autopatch and update ring consolidation
  • Win32 and store app packaging and deployment via Company Portal
  • Defender endpoint protection, tamper protection and attack surface reduction

Protecting who signs in and what they send

Identity & Communication Security

Microsoft Entra ID, Conditional Access and messaging security, so accounts cannot be trivially taken over and your email cannot be trivially spoofed.

  • Conditional Access design, including break-glass accounts
  • Multi-factor authentication and passwordless rollout
  • Privileged and admin account separation
  • Joiner, mover and leaver automation
  • Exchange Online protection, SPF, DKIM and DMARC
  • Microsoft Teams, meeting room and desk phone security

Tenants built properly the first time

Cloud & Microsoft 365

Migration, architecture and administration for organisations moving to, or cleaning up, Microsoft 365 and Azure.

  • Tenant setup, domain and DNS configuration
  • Email, file server and SharePoint migrations
  • Hybrid and on-premises to cloud transitions
  • Teams, SharePoint and OneDrive information architecture
  • Licence review and non-profit grant optimisation
  • Tenant-to-tenant migration for mergers and restructures

Environments that do not need daily rescuing

Stable, Self-Running Infrastructure

Most support tickets are not bad luck; they are the symptom of an environment that was never standardised. I build infrastructure that holds its own shape, consistent configuration, automated updates, and monitoring that tells us before the user does.

  • Standardised device and server build configurations
  • Automated patching and update rings, with staged rollout
  • Monitoring and alerting on the things that actually cause outages
  • Self-service and automated fixes for the common repeat tickets
  • Redundancy and failover designed in where downtime is costly
  • Documented baselines so drift is visible and correctable
  • A measurable drop in recurring day-to-day support load

The layer everything else depends on

Networks, Backup & Recovery

Design, rollout and third-level support for the infrastructure underneath, plus backup that has actually been restore-tested.

  • Routing, switching, Wi-Fi and structured cabling
  • Firewall deployment and rule review (Fortinet, Meraki)
  • Multi-site connectivity and remote access
  • Veeam and cloud backup design
  • Documented, tested disaster recovery
  • CCTV, IP telephony and audio-visual systems

A presence that works and gets found

Web Development & SEO

WordPress and platform builds, learning portals, and the technical SEO work that decides whether anyone actually sees them.

  • WordPress design, build and maintenance
  • Learning platforms and SCORM course delivery
  • Cloudflare, performance and uptime
  • Technical SEO, structured data and Google Search Console
  • Google Analytics and Search Console setup via Site Kit
  • Accessibility and mobile improvements

How it works

A straightforward way to get started

1️⃣

Discovery

A conversation about the process or the risk that is actually hurting. No sales deck.

2️⃣

Written assessment

What you have, what the gaps are, what I would change first and what it costs. Yours to keep either way.

3️⃣

Build

Delivered in versioned stages you can see and test, not one big reveal at the end.

4️⃣

Handover

Documentation, manuals, scripts and training so your team owns it, not me.

Questions

Common questions

Do you work on-site in Perth, or remotely?

Both. I work on-site across the Perth metropolitan area, from Joondalup and Midland through to Armadale, Rockingham, Kwinana and Mandurah, travel to regional Western Australia for project work, and support clients remotely Australia-wide.

Does my data leave my Microsoft 365 tenant?

No. Everything I build, SharePoint lists, SPFx apps, Power Automate flows, runs inside the Microsoft 365 tenant you already own. There is no third-party SaaS platform holding your records, no external database, and no vendor to leave you if you stop paying them.

Do I need extra licences for the solutions you build?

Usually not. I deliberately build on SharePoint Online and Power Automate, which are included in most Microsoft 365 business and non-profit plans, rather than on premium Power Apps or third-party platforms.

Who do you typically work with?

Not-for-profits, Aboriginal community-controlled organisations, and small to mid-sized businesses, teams of roughly 20 to 300 people that need enterprise-grade systems without an enterprise budget or an in-house development team.

Can you take over an environment someone else set up?

Yes. A large part of my work is auditing an inherited Microsoft 365 tenant, documenting what is actually there, removing conflicting policies and bringing it to a known, secure, documented baseline.

What does an engagement usually start with?

A short discovery conversation, then a written assessment: what you have, what the risks are, what I would change first, and what it costs. You keep that document whether or not you go ahead.

Get started

Let’s talk about your IT

Based in Perth, working across WA and remotely Australia-wide. No obligation, tell me what is slowing your team down and I will tell you honestly whether I can help.

Email [email protected]Call 0404 291 659

© 2026 Waseem Raza Bhatti · Waseem ICT Support & Services · Perth, Western Australia · [email protected]