Design & Modernize Cloud Architecture
A secure, well-organized AWS or Azure foundation your whole team can understand, whether you're starting fresh or cleaning up years of growth.
Shane Schlabach · AWS Solutions Architect – Professional · 12+ years in AWS & Azure · Remote across the US
Overview
I design VPC and VNet architectures, subnet segmentation, and IAM/RBAC models from the ground up. For environments that have evolved through years of ad hoc changes, I'll assess and modernize the existing architecture rather than start over. That includes implementing consistent tagging and naming standards so resources stay identifiable and manageable by the whole team — not just whoever created them.
When a workload needs to span regions or cloud providers, I build in multi-region resilience along with hybrid and multi-cloud solutions where they provide real value. This includes private connectivity between environments, shared identity, and consistent security controls across AWS and Azure.
Every part of the architecture — from networking and identity to compute and data — is defined and deployed as Infrastructure as Code (IaC), ensuring the environment remains consistent, repeatable, and version-controlled throughout its lifecycle.
Selected work
Examples from enterprise production environments I've led. Client names are kept private.
Deploy a SaaS platform on Azure with Bicep
- Problem
- A SaaS product needed its Azure services (App Service web apps, Function Apps, Azure SQL, Storage, and Key Vault) deployed consistently and securely.
- What I did
- Defined everything in Bicep, with managed identities for app access, RBAC role assignments alongside the resources, and secrets centralized in Key Vault.
- Result
- The proof of concept moved to production with VNet integration and private endpoints through reviewed template changes, not a manual rebuild, and every environment deploys the same way.
How engagements work
Every engagement starts with a free, no-obligation conversation. Project work is $150/hour with scope agreed up front, or ongoing care as a monthly managed service.
- 1
Discovery
What you run today, where it hurts, and what “done” looks like.
- 2
Plan
A written roadmap: options, sequence, and what I would touch first.
- 3
Build
Infrastructure, automation, and security — as code, in your accounts.
- 4
Support
Monitor, patch, and keep changing it as the workload changes.
Common questions
Who will I be working with?
Me, Shane Schlabach. The person on the first call is the person doing the work. There are no account managers and no handoffs to junior staff.
How much does it cost?
Project work is $150/hour, with scope and a plan agreed before work starts. Managed service starts at $2,000/month and is scoped after a review of your environment.
Do you work with companies outside Ohio?
Yes. I'm based in Cincinnati, Ohio and work remotely with teams across the United States.
Who owns the code and documentation?
You do. Everything is built in your own AWS or Azure accounts and source control, with handoff documentation so your team can run it without me.
How do we get started?
Use the form below to send a few sentences about where things stand. I reply within one business day, and the first conversation is free with no obligation.