Azure Posture and Identity Hardening for a Telecom
Standing privileged access cut by 87%, and conditional access enforced for every administrator.
Client name withheld by agreement- Client
- Regional telecom carrier
- Region
- South Central U.S.
- Year
- 2025
- Duration
- 12 weeks
- Scope
- 58 subscriptions · 22,000 identities
- Practice
- AI, Cloud & Digital Trust
The challenge
What was at stake.
A regional telecom carrier ran 58 Azure subscriptions and more than 22,000 identities. Standing administrator access had accumulated for years, and an attacker with one stolen credential could reach almost anything.
The carrier needed to shrink that risk without breaking network operations that customers depend on every minute.
What we did
The approach, step by step.
- 01
Identity attack paths mapped
Every route from a normal account to tenant-wide control, ranked by how easy it would be to exploit.
- 02
Privileged access redesigned
Just-in-time elevation, admin tiering and conditional access for every privileged role.
- 03
Posture baselined
Subscription configuration benchmarked and fixed in priority order with the platform team.
- 04
Monitoring that alerts on what matters
Detections for privilege escalation and token theft tuned to the carrier’s environment.
Outcomes
What changed, in numbers.
- 87%
- cut in standing privileged access
- 58
- subscriptions baselined
- 22,000
- identities under conditional access
- 100%
- of administrators on phishing-resistant MFA
We took away most of the keys to the kingdom, and operations never noticed.
Services delivered
Related engagements
More work in AI, Cloud & Digital Trust.
-
Austin, Texas · 14 weeks
AI, Cloud & Digital Trust · 2024SOC 2 Type II Readiness for an HR PlatformA clean Type II report on the first audit window, and enterprise deals unblocked the same quarter.
-
U.S. and EU · 20 weeks
AI, Cloud & Digital Trust · 2025 · OngoingAI Governance and Red Teaming for a GenAI PlatformAn AI management system built for certification, and 31 jailbreak paths closed before launch.
-
Texas and Oklahoma · 26 weeks
AI, Cloud & Digital Trust · 2024Secure Cloud Landing Zone for a Health NetworkGuardrails in code across every account, with critical misconfigurations down 92% in two quarters.
Let’s talk about your version of this.
Share what you are up against. A senior practitioner who has delivered this kind of work will reply within one business day.