SysOps LLC

Core Services

From planning to deployment to security maturity, SysOps delivers practical engineering support that helps organizations modernize and operate with confidence.

We are currently serving clients across Southeast Georgia and North Florida.

Infrastructure Modernization

Assess and modernize server, virtualization, network, endpoint, and continuity architecture for reliability, scalability, and growth, including cost-saving virtual environment migrations and recovery-ready backup design.

Active Directory & Identity Security

Design, cleanup, migration, hardening, MFA integration, and stronger identity/access controls.

Endpoint Management

Deploy and optimize Intune and SCCM/MECM for lifecycle management and enterprise-ready endpoint operations.

Network & Perimeter Security

Improve segmentation, firewall policy, switching, and wireless architecture to reduce risk and improve performance.

Network Discovery & Topology Mapping

Discover network-connected assets, map how systems are interconnected, and build clear visual topology views for operations, security, and planning.

Detection, Logging & Visibility

Implement endpoint detection, centralized logging, and security visibility foundations for faster response.

Representative Projects and Delivery Examples

These examples reflect the type of implementation and modernization engagements SysOps commonly delivers.

SCCM Imaging and Intune Device Enrollment Automation

Designed and deployed Microsoft SCCM imaging workflows with standardized task sequences and post-build controls.

  • Built reliable bare-metal imaging and driver/application layering
  • Configured optional automation to register newly imaged devices into Intune
  • Aligned endpoint provisioning with policy baselines and inventory visibility

PKI and 802.1X Secure Wireless

Implemented internal PKI with certificate-based authentication to harden wireless access and remove shared credential reliance.

  • Deployed certificate templates, issuance controls, and renewal strategy
  • Integrated certificates with 802.1X for secure wireless communication
  • Improved identity assurance and reduced unauthorized network access risk

Zero Trust NAC with Cisco ISE and Forescout

Built policy-driven network access controls so only compliant and trusted endpoints can connect.

  • Enforced posture checks before granting production access
  • Enabled automated remediation workflows for non-compliant devices
  • Applied auto-quarantine policies for high-risk or unknown systems

Segmentation and High-Availability Network Architecture

Designed resilient networks using firewalls, switches, APs, and segmentation to contain threats and protect critical resources.

  • Separated user, server, voice, IoT, and sensitive zones with clear trust boundaries
  • Implemented high-availability and failover-capable network/security paths
  • Improved uptime, performance, and operational manageability

Network Discovery, Dependency Mapping, and Visualization

Performed structured network discovery to identify active assets, communication paths, and system relationships, then produced decision-ready visual maps.

  • Cataloged devices, subnets, key services, and ownership context
  • Mapped connectivity dependencies between endpoints, infrastructure, and critical systems
  • Delivered topology visualizations to guide segmentation, remediation, and migration planning

Virtualization Deployment and Cost-Optimized Migration

Planned and executed virtualization platform deployments and migration programs to modernize aging infrastructure while controlling spend.

  • Assessed legacy workloads and mapped right-sized target resource profiles
  • Migrated virtual workloads with minimal downtime and phased cutover plans
  • Reduced licensing, hardware, and operational overhead through consolidation

Firewall Policy, SSL Decryption, and URL Filtering Enforcement

Configured layered policy controls to reduce malicious traffic exposure and enforce acceptable use requirements.

  • Built security rules based on least privilege and business need
  • Implemented SSL decryption strategies where appropriate for inspection visibility
  • Applied category-based URL filtering to block malicious or unwanted sites

Cloud Management, Baselines, and Security Operations

Delivered modernization programs that decentralize legacy management and strengthen control maturity.

  • Configured Intune/Azure environments for cloud-based device and policy management
  • Deployed hardened DISA STIG or CIS benchmark baselines with application allowlisting
  • Implemented Microsoft 365 services with DLP protections for sensitive information
  • Deployed SIEM use cases, alerting logic, and file integrity monitoring for critical assets

Business Continuity, Backup Architecture, and Recovery Execution

Implemented backup and recovery platforms designed around business impact, risk tolerance, and recovery commitments.

  • Defined backup policies aligned to workload criticality and retention requirements
  • Engineered recovery workflows to meet target RPO/RTO timeframes
  • Validated recoverability through scheduled restore testing and recovery drills

Public Records and FOIA Workflow Automation

Designed and delivered an internal application that streamlines public-records and FOIA response preparation from email archive data.

  • Enabled secure upload of PST files directly into the application workflow
  • Converted PST content into review-friendly PDF output for easier analysis and redaction
  • Removed the legacy dependency of importing PSTs into Outlook just to export request data
  • Reduced turnaround time for records review and improved consistency in fulfillment workflows