IT Infrastructure & Cybersecurity

• Carrier networks (Service-provider networks) Where we started, helping an incumbent operator move from analogue straight to IP. Today we support operator networks and provide field, provisioning and commissioning services.
• Campus and branch LAN (Local area network) We design, build and run it with Cisco, our deepest partner, and with Arista, HPE, Ubiquiti, MikroTik or open-source solutions when that is what fits the client. Also as a service, with the hardware included.
• Enterprise Wi-Fi (Wireless LAN) Predictive design, on-site surveys, installation and operation, up to Wi-Fi 7 with OpenRoaming. We have run the Wi-Fi at Battersea Power Station since 2016.
• SD-WAN (Software-defined wide area network) Design, migration from legacy WAN and VPN, and operation from our NOC.
• Data centre networking (Data centre fabric) Fabric design and build, network virtualisation, and the connections into Azure and Google Cloud.
• DDI (DNS, DHCP and IP address management) Design and migration to managed DDI, with Infoblox among our partners, and DNS security alongside it.
• Network and infrastructure automation (Infrastructure as code) Automation is part of how we deliver. We hand it over to client teams that want to run it themselves.
• Converged building networks (Smart buildings) 60+ smart buildings across Europe, among them 22 Bishopsgate, 150 Holborn, Battersea Power Station, Co-op Live and Twickenham. Enlayer UK is a founder member of the Intelligent Ready Building consortium, with Cisco, Schneider Electric and Para.
• Structured cabling (Copper and fibre) Delivered with specialist partners. We own the design, the result and the final commissioning.

• Compute (Servers) Sizing, supply, installation and lifecycle, with Dell Technologies (Titanium Partner), Cisco, HPE and Lenovo, among others.
• Virtualisation (Hypervisors) VMware, Nutanix, Proxmox and open-source KVM, so we can price a move as honestly as a renewal.
• Hyperconverged infrastructure (HCI) Nutanix and other platforms, designed, built and supported.
• Storage (Block, file and object) Design, migration and support, on site and in the cloud, including software-defined storage. Partners include Dell Technologies, IBM, Pure Storage, HPE and Fujitsu.
• Operating systems and directory (Windows Server, Linux, Active Directory) Microsoft infrastructure from domain controllers to file servers, Linux including Red Hat (Advanced Partner), and the move to hybrid identity.
• Server rooms and data centre facilities (The room) Design and build of server rooms and small data centres, with specialist partners for power and cooling.

• Backup and recovery Design, operation and tested restores. Veeam (Gold Reseller, Silver VCSP), Commvault and other platforms.
• Immutable backup (Ransomware-proof copies) Immutable and isolated copies are standard in our designs.
• Business continuity and disaster recovery (BC/DR, RTO and RPO) Business impact analysis, recovery design and regular tests, built to ISO 22301, the standard we are certified against ourselves.
• High availability (Active-active and active-standby) Active-active and active-standby designs across data centres and the cloud.

• Microsoft 365 and Google Workspace (Software as a service) Migration, set-up and support, including Entra ID, Defender and Purview, and hybrid set-ups with on-premises Exchange and Active Directory. Microsoft Cloud Solution Provider; Google Cloud Select Tier partner.
• Azure and Google Cloud (IaaS and PaaS) Design, migration and support for infrastructure, and advice on platform services for development teams.
• Private and hybrid cloud Built on VMware, Nutanix, Proxmox, Red Hat OpenShift and other platforms, and run as a service where you want it: compute, storage and backup.
• Landing zones and cloud migration Assessment, landing-zone build and migration in waves, with a rollback plan for each wave.
• FinOps (Cloud cost management) Cost reviews, rightsizing and reserved capacity, as a service or as a one-off review.
• Containers and Kubernetes (Docker, Kubernetes, OpenShift, Rancher, K3s) We build and run the platform; AI & Software Engineering builds what runs on it.
• GPU and high-performance computing (HPC) Design and build of GPU infrastructure, from the rack to the cluster network. Registered NVIDIA networking partner.
• Edge compute Edge platforms built and run as part of the stack. Advanced OT Solutions owns the plant-floor applications that run on them.

• Endpoint management (Intune and Workspace ONE) Microsoft Intune and Omnissa Workspace ONE (Platinum Partner).
• Virtual desktops (VDI and desktop as a service) Omnissa Horizon, Citrix and Azure Virtual Desktop.
• IP telephony (Voice over IP) Where our enterprise work began, alongside networking, with Cisco.
• Video and meeting rooms (Collaboration) Design, fit-out and support.
• Contact centres Design, build and support.

• Next-generation firewalls (NGFW) Cisco, Palo Alto Networks, Check Point and Fortinet, among others. Rule reviews are part of the work, because old rules pile up.
• Web application firewalls, load balancing and DDoS protection (WAF, ADC and DDoS) F5 (Gold Partner), Cloudflare and NetScout Arbor, plus DNS security.
• SASE and SSE (ZTNA, SWG and CASB) Design and rollout with Cisco, Cloudflare, Palo Alto Networks, Microsoft, Fortinet and Zscaler (Premier Partner), tied to the identity and device checks they depend on.
• Email security Proofpoint (Core Partner), Cisco and Microsoft Defender.
• Identity and access management (IAM and IGA) Directories, single sign-on, identity governance and the move to hybrid identity.
• Privileged access management (PAM) CyberArk (Certified Partner) and BeyondTrust, and Silverfort, which protects privileged accounts from inside the identity infrastructure.
• Multi-factor and passwordless sign-in (MFA) Rollouts people actually accept, phishing-resistant where it matters.
• Network access control (NAC and 802.1X) Cisco ISE or open-source network access control, with 802.1X, deployed together with the campus network.
• Identity threat detection and response (ITDR) Detection on Active Directory and Entra ID, connected to our SOC.
• PKI and hardware security modules (PKI and HSM) PKI design and operation, and HSMs with Thales and Entrust.
• Data loss prevention and encryption (DLP) Microsoft Purview, Forcepoint, Symantec and encryption platforms.
• Endpoint detection and response (EDR and XDR) CrowdStrike, SentinelOne, Palo Alto Networks, Microsoft Defender and Trellix, watched by our SOC.
• Cloud security posture (CSPM and CNAPP) Posture assessments and ongoing monitoring in Azure and Google Cloud.
• Application and API security (DevSecOps) Code and component scanning, API protection, and security built into delivery pipelines with our AI & Software Engineering practice.
• OT security (Industrial cybersecurity) Asset discovery and monitoring with Nozomi Networks, segmentation, and SOC coverage. The OT systems themselves are Advanced OT Solutions’ work.
• Penetration testing (Offensive security) A dedicated offensive security team covering networks, applications and cloud.
• Vulnerability management Scanning with Qualys, Tenable and Rapid7, matched to what you really run, with the fixes carried out by our NOC.
• Deception (Honeypots and deception grids) Deception grids with SentinelOne and TrapX.
• Security awareness (Phishing simulation) Programmes with SoSafe and Proofpoint.
• Secrets management (Credential vaults) Vault platforms from HashiCorp and open-source alternatives, designed and run.
• Post-quantum cryptography (PQC) We are building this capability now: finding where cryptography is used, and planning the move, starting with certificates and keys.
• Zero trust Built into our designs through identity, device checks, segmentation and ZTNA.
• Network segmentation (Microsegmentation) Designed into networks and data centres, and between IT and OT.
• NIS2 (EU directive on network and information security) This practice builds and runs the technical controls; our Governance, Risk & Compliance practice covers the governance side.

• Network operations centre (NOC) Our own NOC in Sofia, 24/7/365, run by a separate operations division of 80+ people, certified to ISO/IEC 20000-1.
• Security operations centre and MDR (SOC, managed detection and response) Our own SOC in Sofia, 24/7/365. When it finds an attack, it hands the fix straight to our NOC: one cycle, one team.
• SIEM as a service (Security information and event management) SIEM as a service on an open-source platform we operate. For a client's own SIEM we implement LogSentinel, Palo Alto Networks, Elastic (Select Partner, MSSP), Splunk and IBM, and we work with the one a client already has.
• Network detection and response (NDR) We choose between Cisco, Vectra and NetWitness (Platinum Partner).
• Incident response Response from our SOC, recovery by the engineers who know your systems, and the reporting NIS2 now requires.
• Monitoring and observability Monitoring platforms run by our NOC, with dashboards for each client.
• Managed services From monitoring to full operation as a service, hardware included. We do this worldwide for Lufthansa.
• Field services Our own field engineers, including provisioning and commissioning for telecom operators.
• IT service management (ITSM) ServiceNow implementation (Specialist Partner), and the same practices in our own NOC.
• Asset inventory and CMDB (Configuration management database) Discovery tools and an inventory kept current. The same record drives our vulnerability matching.
• Patch management Patch cycles run by our NOC, with testing and a way back.

We design, build and run the IT an organisation sits on, from the server room and the cabling to the cloud, and the security around every part of it. Our own 24/7 NOC and SOC in Sofia run it afterwards.

Both. The same company that designs a system operates it, to an agreed service level, with the engineers who built it still involved.

More than 100 technology partners, most of them in this practice, plus open source. We keep at least two certified vendors in every layer and recommend what fits your goal and stage. The list changes all the time: if a vendor is not named, we most likely already work with them as partners, and if not, and it is the right one for you, we are willing to invest and learn it.

Yes. Our NOC and SOC are our own, in Sofia, staffed 24/7/365 by a separate operations division of 80+ people, with the whole organisation behind it. The SOC detects and investigates; the NOC carries out the fix.

Our people are based in six countries: Bulgaria, Croatia, Germany, North Macedonia, Serbia and the United Kingdom. We deliver in 59 countries.

Yes. This practice builds and runs the technical controls NIS2 expects, from identity and logging to incident response and reporting. Our Governance, Risk & Compliance practice covers the governance side.

Yes. An engagement can start as small as an open-source proof and grow as far as the problem goes.

Our engineers work with AI every day, with on-premises models where the data is sensitive. We also build and run the infrastructure AI needs; our AI & Software Engineering practice builds the AI applications on top.