Cloud & Virtualization
Azure
Azure infrastructure and identity integration for organisations already invested in Microsoft platforms.
Capabilities
What we implement
- Virtual network design
- Entra ID integration
- Backup and site recovery
- Hybrid connectivity
Security
How it is hardened
- Conditional access
- Role assignments and PIM
- Diagnostic logging
Editions & pricing
Azure editions and vendor pricing
Vendor list prices for the editions we deploy. Deployment, migration, hardening and support are quoted separately by Techno Trader PK — they are never bundled into these figures.
| Edition | Licensed by | Vendor list price |
|---|---|---|
| B2ms — 2 vCPU / 8 GBLive figure from the Azure retail prices API. Storage, egress and support are extra. | per instance / month (730 h, East US, Linux, pay-as-you-go) | $60.74 |
| D2s v5 — 2 vCPU / 8 GBLive figure from the Azure retail prices API. Storage, egress and support are extra. | per instance / month (730 h, East US, Linux, pay-as-you-go) | $70.08 |
| D4s v5 — 4 vCPU / 16 GBLive figure from the Azure retail prices API. Storage, egress and support are extra. | per instance / month (730 h, East US, Linux, pay-as-you-go) | $140.16 |
| E4s v5 — 4 vCPU / 32 GBLive figure from the Azure retail prices API. Storage, egress and support are extra. | per instance / month (730 h, East US, Linux, pay-as-you-go) | $183.96 |
Prices are refreshed automatically from the vendor's published price feed. Last verified 9 Sept 2026. Vendor list prices exclude tax and can change without notice. Vendor pricing page
Architecture
Azure landing zone reference
Entra ID and subscription structure lead the design, which is what makes Azure workable for organisations already running Microsoft identity and endpoints.
01 · Identity & governance
Entra IDConditional access & MFAManagement groupsAzure PolicyRole assignments reviewed, privileged access time-bound, policy enforcing tagging and allowed regions.
02 · Subscription layout
ProductionNon-productionShared servicesBlast radius and cost ownership separated at the subscription boundary.
03 · Network
Hub VNetSpoke VNetsAzure Firewall / NSGsVPN or ExpressRouteHub-and-spoke with inspected egress; on-premises connectivity terminated once in the hub.
04 · Workloads
Virtual machinesApp Service / AKSAzure SQLStorage accountsAvailability zones where the SLA needs them, private endpoints instead of public storage access.
05 · Protection & operations
Azure BackupSite RecoveryMonitor & Log AnalyticsDefender for CloudBackup and recovery configured with the workload; posture findings triaged rather than accumulated.
FAQ
Azure questions we are asked
- Can we reuse our existing Windows Server licences?
- Usually yes, through Azure Hybrid Benefit where Software Assurance applies. Licensing is confirmed against your agreement before sizing, because it changes the economics materially.
- Should we extend on-premises AD or move to Entra ID only?
- It depends on what still depends on domain join. Hybrid with Entra Connect is common; cloud-only is cleaner where legacy applications and file servers no longer require a domain.
- How do we connect the office to Azure?
- Site-to-site VPN for most estates, ExpressRoute where bandwidth, latency or contractual guarantees justify the cost. Both terminate in the hub network.
- Is Defender for Cloud necessary?
- The free posture layer is worth enabling everywhere. Paid plans are recommended selectively, on the workloads whose compromise would actually matter.
Related
Other cloud & virtualization platforms
Azure is referenced to describe engineering capability. All trademarks and product names are the property of their respective owners; no partnership or endorsement is implied.
Ready to scope the work?
Share your environment and objectives. You will get an engineering response covering scope, approach and considerations.