120 Facilities. 19,000 Employees. A Beverage Giant's Security Infrastructure Built for the Future.

Stakeholder meetings set the scope and gathered hardware, software, business, and technical requirements. We assessed the existing environment and drafted the CP and CPS documents with the client, with review and knowledge transfer sessions handing ownership to their team.

We wrote the PKI trust model and production build documents, set up the PKI in production, and implemented OCSP. Windows Hello for Business and Microsoft Intune were integrated as the two main use cases, giving employees passwordless biometric login and IT centralized device management. Functional tests ran throughout, reviewed by the client each round.

Intune integration centralized security policy enforcement and compliance monitoring across every device. Automated certificate issuance and renewal cut IT workload and human error. The PKI encrypted data in transit and at rest, RBAC limited access to authorized users and devices, and PKI-generated keys were stored securely.

We built a business continuity plan covering PKI operations and disaster recovery for the Root CA, Issuing CA, and OCSP, plus a PKI operations guide. Knowledge transfer sessions left the client team able to run and recover the infrastructure independently.