Independent Security Architecture Practice

Enterprise data,
secured by design —
not by accident.

IMA Consulting is an independent cyber security architecture practice specialising in data security, cloud WAF and enterprise risk programmes for telecommunications and complex regulated environments. Contract engagements delivered outside IR35.

Request a brief → View engagement record
2,000+
DATABASES SECURED
7+ YRS
ARCHITECTURE DELIVERY
TIER-1
TELECOM PROGRAMME
DATA SECURITY FABRIC IMPERVA CLOUD WAF DATABASE ACTIVITY MONITORING THREAT & RISK ASSESSMENT ISO 27001 GOVERNANCE ENTRA ID & IAM CLOUD MIGRATION OUTSIDE IR35

§ 01 — Practice

Architecture, not administration.

IMA Consulting designs and delivers the security architecture that sits behind an organisation's most sensitive data — the standards, controls and platform decisions that hold under audit, not just under normal operation.

The practice's core body of work is a multi-million-pound Data Security Fabric programme for a Tier-1 telecommunications provider: architecture, controls and standards that secured over 2,000 databases across hybrid cloud and on-premises infrastructure, delivered alongside Imperva Cloud WAF policy configuration, tuning and application onboarding for the same estate.

Engagements translate regulatory requirement — GDPR, SOX, ISO 27001, Cyber Essentials Plus — into architecture decisions that enterprise architects, engineering teams and governance boards can act on, with the documentation and audit evidence to support it.

  • Sector focusTelecommunications · Enterprise · Regulated industry
  • Engagement basisContract, Outside IR35, remote-first
  • ClearanceBritish citizen, eligible for security clearance
  • AvailabilityShort-term and programme-length contract

§ 02 — Capabilities

Six areas of practice.

REF: IMA-CAP-06
01 / ARCHITECTURE

Security Architecture & Design

Target-state architecture, control frameworks and design principles applied consistently across infrastructure, network, application and cloud domains.

02 / DATA

Data Security Fabric & DAM

Enterprise DSF/DAM/DRA deployment — auditing, vulnerability scanning, user rights analysis and data classification at scale.

03 / WAF

Imperva Cloud WAF

Policy configuration, rule tuning and application onboarding for enterprise Cloud WAF estates, plus vendor-level escalation support.

04 / RISK

Risk & Threat Management

Security risk assessment, threat modelling and CVE analysis, translated into prioritised, business-relevant mitigation plans.

05 / GOVERNANCE

Governance, Risk & Compliance

ISO 27001 implementation and auditing, GDPR/SOX/Cyber Essentials Plus readiness, audit evidence and policy development.

06 / TRANSFORMATION

Cloud & Identity Transformation

Legacy-to-cloud migration architecture, Entra ID / conditional access design, and modernisation programme delivery.

§ 03 — Engagement Record

Selected programme delivery.

CLIENT NAMES WITHHELD
TELECOMMUNICATIONS — LEAD ARCHITECT ENG/01

Data Security Fabric programme, Tier-1 telecom provider

Acted as lead security architect on a multi-million-pound Imperva Data Security Fabric programme, defining the target architecture and controls that secured over 2,000 databases across hybrid cloud and on-premises infrastructure — auditing, vulnerability scanning, user rights analysis and data classification. Partnered with enterprise architects and senior stakeholders to align delivery with business, regulatory and technical requirements, and produced the architecture documentation and audit-ready evidence for GDPR, SOX and ISO 27001 sign-off.

2,000+Databases onboarded
HybridCloud + on-prem scope
3Compliance frameworks
TELECOMMUNICATIONS — WAF DELIVERY ENG/02

Imperva Cloud WAF policy configuration & onboarding

Owned day-to-day configuration and tuning of Imperva Cloud WAF and DSF/DAM/DRA policies across a large, complex telecommunications estate, onboarding new web applications and databases in line with defined security standards, and working directly with the vendor on product-level support and escalation.

WAFRule set tuning
DAM/DRAPolicy ownership
VendorDirect escalation route
CLOUD — MODERNISATION ENG/03

Legacy-to-cloud migration architecture, Azure & AWS

Led architecture design and delivery for a technology modernisation programme migrating a legacy on-premises environment to a cloud-centric model, planning cutover with technical teams and stakeholders to reduce cost, standardise security posture and minimise disruption. Included a proof of concept on AWS for file activity monitoring and data discovery & classification, run directly with the platform vendor.

Azure/AWSTarget platforms
PoCFAM & DDC on AWS
ENTERPRISE — IDENTITY & ENDPOINT ENG/04

Microsoft 365 security architecture, multi-client

Designed and delivered Microsoft 365 security architecture for multiple enterprise clients — Defender, Exchange Online Protection and Advanced Threat Protection — with Entra ID conditional access, Intune MDM and DLP policy and architecture. Supported Cyber Essentials Plus certification through vulnerability identification and remediation evidence.

M365Defender / EOP / ATP
Entra IDConditional access, IAM
CE+Certification support

§ 04 — Technical Matrix

Full competency index.

REF: IMA-MTX-04

Security Architecture & Controls

  • Security architecture design & roadmapping
  • Security controls, standards & principles definition
  • Secure-by-design & best-practice frameworks
  • Technical documentation & architecture diagrams

Risk & Threat Management

  • Security risk assessment & mitigation planning
  • Threat modelling & vulnerability management
  • CVE analysis & remediation prioritisation
  • Threat detection & incident response

Infrastructure, Cloud & Network

  • Hybrid cloud & on-premises security (Azure, AWS)
  • Entra ID (Azure AD), conditional access & IAM
  • Network security & protocol analysis
  • Database, endpoint & application security

Governance, Risk & Compliance

  • ISO 27001 implementation & auditing
  • GDPR, SOX, SOC & Cyber Essentials Plus
  • Audit evidence collection & assurance
  • Security policy & standards development

Imperva & Data Platform

  • Imperva Cloud WAF — policy configuration & tuning
  • Imperva DSF, DAM & DRA — enterprise deployment
  • Web application & database onboarding
  • Vendor product support & escalation

Transformation & Engagement

  • Platform-to-platform migration planning
  • Legacy-to-cloud environment migration
  • Cross-functional & senior stakeholder liaison
  • Managed service & programme delivery

§ 05 — Credentials

Certifications on file.

MSc Data Networks & Security · BSc Computer Science
In progress

CISSP

Examination passed — endorsement in progress
In progress

AWS Certified Solutions Architect

Associate level
Completed

ISO/IEC 27001:2022

Lead Auditor
Completed

CompTIA Security+

Core cybersecurity certification
Completed

Thales / Imperva

WAF Security & Data Security specialist
Completed

Recorded Future

Certified Partner Engineer, threat intelligence
Completed

Proofpoint

Identity Threat Detection & Response
Completed

MSc Data Networks & Security

Commendation
Completed

BSc Computer Science

Upper Second-Class (2:1)

§ 06 — Engagement Model

How engagements run.

OUTSIDE IR35

  1. Initial brief

    Scope, timeline and success criteria confirmed by email — no commitment required to talk it through.

  2. Architecture & risk review

    Current-state review of the relevant estate — data, network, cloud or application — against the target requirement.

  3. Design & documentation

    Target architecture, control standards and technical documentation produced for governance and stakeholder sign-off.

  4. Delivery & handover

    Implementation support through to cutover, with runbooks and audit-ready evidence left with the client team.

CLEARANCE ELIGIBLE

Engagement terms

  • Contract engagements, Outside IR35
  • Remote-first, UK-based
  • Short-term projects and programme-length delivery
  • Out-of-hours on-call / incident response available
  • British citizen, eligible for security clearance
  • Direct engagement or via agency / SOW

§ 07 — Contact

Send a brief. Get a response.

For contract engagements, statements of work or an initial conversation about a security architecture, Data Security Fabric or Imperva Cloud WAF requirement.

info@imaconsulting.co.uk

IMA CONSULTING · INDEPENDENT SECURITY ARCHITECTURE PRACTICE