Soulier Group LLC
UEI HUJFDP334G53 · CAGE 1ZZP6 · SAM.gov registration active
souliergroup.com · brian@souliergroup.com · Rhinelander, WI
Capability Statement
Microsoft 365 Governance, Identity, Threat Protection, Network Security, Virtualization, Records Management, and Compliance Translation for Federal and Regulated Commercial Environments.
Quick Facts
| Legal Name | Soulier Group LLC |
| Unique Entity ID (UEI) | HUJFDP334G53 |
| CAGE Code | 1ZZP6 (assigned 2026-05-07) |
| Entity Type | Wisconsin LLC (single-member, disregarded entity) |
| Primary NAICS | 541512: Computer Systems Design Services |
| Additional NAICS | 541519, 541611, 541690, 518210, 541513, 561621 |
| Size Standard | Small Business at all NAICS sizes |
| State of Formation | Wisconsin (organized 2026) |
| Principal Place of Business | Wisconsin |
Socioeconomic Status
- ✓ Indian Economic Enterprise (IEE) and Indian Small Business Economic Enterprise (ISBEE), Buy Indian Act: self represented; the IEE representation is provided per solicitation
- ✓ Small Disadvantaged Business (SDB): self represented in SAM.gov (FAR 52.212-3)
- ✓ Native American Owned (enrolled member, Lac du Flambeau Band of Lake Superior Chippewa Indians of the Lac du Flambeau Reservation of Wisconsin)
- ✓ Minority Owned Business (self represented in SAM.gov)
- ◤ SBA 8(a) Business Development Program: eligibility under review following SBA's September 2026 rule change
Capability Domains
1. Microsoft 365 Tenant Governance and Policy Management
- Purview Records Management: retention label policies, file plan administration, disposition review workflows
- Purview eDiscovery: Standard and Premium configuration for legal hold and investigation workflows
- Purview Communication Compliance: policy design for sensitive communication monitoring
- Purview Audit (Standard/Premium): audit log search, evidence collection, investigation
- Microsoft 365 Admin Center: tenant-level policy, license management, Secure Score, Compliance Manager
2. Identity, Access, and Privileged Access Governance
- Microsoft Entra ID (Azure AD): tenant configuration, hybrid identity federation, B2B/B2G external collaboration controls
- Conditional Access: policy authoring for risk based authentication, device compliance enforcement, location based controls, session controls via Defender for Cloud Apps
- Privileged Identity Management (PIM): just in time admin role activation, access reviews, eligible vs. active assignment governance
- Identity Governance: access reviews and entitlement management
- Microsoft Authenticator / FIDO2 / WHfB: phishing resistant MFA deployment, passwordless enrollment
- Active Directory: on premises AD, Group Policy, Kerberos, AD Connect / Entra Connect synchronization
3. Records Management and Retention
- Retention label policy design that translates to DoD Records Management Program requirements (DoDI 5015.02)
- File plan administration with regulatory record categorization
- Disposition workflows with custodian review and audit trails
- Litigation hold via Purview eDiscovery (Standard / Premium)
4. Security Operations and Threat Protection
- Microsoft Defender for Endpoint: policy tuning, threat hunting, automated investigation and response (AIR), attack surface reduction (ASR) rules
- Microsoft Defender for Cloud Apps: cloud app discovery, session control, conditional access app control
- Defender Advanced Hunting: threat hunting, anomaly investigation, alert tuning
- Tier 3 incident response: root cause analysis, containment, eradication, customer facing incident communications
- Microsoft Secure Score / Compliance Manager: tenant baseline assessment, control attestation, posture improvement roadmaps
- KnowBe4: phishing simulation, security awareness training campaigns, user risk score tracking
5. Network Security and Perimeter Operations: Multi Vendor
Production hands on operations across the network security platforms that dominate federal civilian, DoD, SLED, and tribal IT environments:
- Palo Alto Networks PAN-OS: base NGFW policy design and configuration. (Palo Alto Networks is widely deployed across DoD networks under enterprise license arrangements.)
- Cisco: ASA firewalls, Firepower Threat Defense (FTD), ISR routers, AnyConnect VPN, Cisco UCS server platform. (Cisco dominates the install base across federal civilian agencies and IHS.)
- Cisco Meraki: MX security appliances, MS switches, MR access points, Systems Manager MDM, cloud managed dashboard. (Cisco Meraki is dominant in federal civilian remote sites, K-12, and county / state agencies.)
- Fortinet FortiGate: NGFW policy design, VPN (IPsec / SSL), VDOM administration (multi tenant FortiGate), FortiManager / FortiAnalyzer, Security Fabric. (Fortinet leads SLED firewall renewals; Fortinet Federal Inc. provides DoDIN APL-approved variants for DoD work.)
- FortiClient / FortiSwitch / FortiAP: endpoint compliance, endpoint VPN, Security Fabric integration. (Fortinet ZTNA exposure is familiarity-level; primary ZTNA experience is via Entra ID Conditional Access.)
- SonicWall: TZ and NSa series firewalls. (SonicWall is common in K-12, small county government, and small federal subcontractor environments.)
- HPE Aruba: Aruba switching and wireless production deployments, plus Aruba Central cloud managed networking dashboard. (HPE Aruba is heavily deployed across federal civilian agencies and SLED via NASPO + GSA contract vehicles.)
- WatchGuard, Ubiquiti: small business and remote office tier deployments.
- Network segmentation and zoning: defense in depth design across multi tenant regulated MSP environments.
- Switch and routing operations: VLAN, trunking, L3 policy, multi vendor migration projects (e.g., Cisco to Fortinet, Fortinet to Palo Alto, HPE Aruba to Cisco).
6. Virtualization and Datacenter Operations
- VMware vSphere / vCenter / vSAN: production hypervisor administration, HA cluster operations, datastore management, capacity planning, version uplifts
- Microsoft Hyper-V: clustering, live migration, production deployments at lower tier scale
- Post Broadcom virtualization strategy: license impact analysis (VVF / VCF), Hyper-V migration evaluation, Veeam based DR continuity through migration windows
- Datacenter operations: server lifecycle management, SAN / RAID storage, infrastructure refresh leadership, end of support remediation, full server builds and rack deployments across MSP client environments
- Server hardware: HPE Synergy (composable infrastructure), Cisco UCS (Unified Computing System), HP / HPE rack servers, Dell servers
- Storage: HPE Nimble Storage, HPE 3PAR, NetApp, Synology, VMware vSAN. Fibre Channel, iSCSI, and direct connect SAS connectivity
- Backup and disaster recovery: Veeam, Datto, Axcient, Dropsuite, Veritas, Microsoft 365 backup tooling, on prem to cloud DR design
7. Email Security and Hybrid Mail
- Exchange Online: mail flow, transport rules, anti-phishing, Safe Links, Safe Attachments
- Hybrid Exchange: on prem to cloud migrations, hybrid mail flow design, coexistence
- Email authentication: SPF, DKIM (multi selector), DMARC reporting and policy progression, MTA-STS, BIMI considerations
- DNSSEC-signed zones: deployment, DS publication, zone-signing key rotation
- Defender for Office 365 and Exchange Online Protection (EOP): ATP policies, attack simulator, threat explorer
8. Compliance Program Support: Translation to Federal Requirements
| Framework Experience | Translation to Federal / DoD Requirements |
|---|---|
| HIPAA Security Rule | Risk analysis (164.308(a)(1)), access control (164.312(a)), audit controls (164.312(b)), evidence collection. Crosswalks to NIST SP 800-66r2 and NIST 800-53 (Moderate baseline). Audit evidence patterns translate to NIST 800-171 safeguarding for DoD CUI. |
| PCI DSS | Network segmentation (Req 1), access control (Req 7-8), vulnerability management (Req 5-6, 11), audit logging (Req 10). Crosswalks to NIST SP 800-171 / CMMC Level 2 control families AC, AU, CM, SC, SI. |
| CJIS Security Policy v6 | Multi state law enforcement client support. CJIS Security Policy Appendix G provides direct crosswalk to NIST SP 800-53 controls. Advanced Authentication, audit logging, and physically secure location requirements translate to NIST 800-171 control families. |
| NIST 800-171 / CMMC Level 2 | Control mapping from HIPAA, PCI DSS, and CJIS control sets to NIST SP 800-171 requirements and CMMC Level 2 practices. |
| FFIEC / GLBA (adjacent, banking) | No direct GLBA / FFIEC examination work. Adjacent regulatory rigor pivot from PCI DSS and HIPAA experience: same evidentiary, control design, and audit readiness patterns. FFIEC Cybersecurity Assessment Tool (CAT) and Information Security IT Examination Handbook align with NIST CSF and NIST 800-53. |
| NIST 800-53 / NIST CSF | NIST 800-53 control work; NIST CSF familiarity for cyber program design across the Identify / Protect / Detect / Respond / Recover functions. |
These regulatory patterns share evidentiary, control design, audit readiness, and continuous monitoring requirements with NIST 800-53 Moderate, NIST 800-171 / CMMC Level 2, and DoD CUI safeguarding under DoDI 5200.48.
9. Microsoft Cloud Partner and Licensing
- Microsoft 365 / Office 365 licensing: EA, CSP, NCE evaluation; SKU-to-feature mapping for compliance contexts
- Microsoft 365 Business Basic / Business Standard / Business Premium: tenant deployment, custom domain federation, MX / SPF / DKIM / DMARC integration
- Microsoft Cloud Partner Program: evaluating enrollment ahead of CSP eligibility
Live Security Posture (Walk the Walk)
Soulier Group LLC operates this website and its mail domain with the same defense in depth posture we recommend to clients. HTTP controls: HSTS with a one year max-age, includeSubDomains, and the preload directive (not yet on the browser preload list); TLS 1.2 or higher; strict Content Security Policy; X-Frame-Options DENY; Referrer-Policy strict-origin-when-cross-origin; Permissions-Policy lockdown. DNS: DNSSEC signed (DS at .com TLD, ECDSA P-256 / SHA-256). Mail: SPF hard fail; DKIM; DMARC at enforcement (p=quarantine), progressing to reject; MTA-STS published in testing mode with TLS reporting (TLS-RPT). Federal alignment: progressing toward CISA BOD 18-01 (DMARC reject). Independent verification welcome via the security.txt at /.well-known/security.txt.
Differentiators for Prime Subcontracting Teams
- DoD 8140/8570 IAT Level II baseline (Active CompTIA Security+ SY0-701): principal holds the federally recognized cybersecurity workforce qualification (achieved 2026-05-10); satisfies "Sec+ or equivalent" prerequisite common in DoD and civilian federal IT solicitations.
- ISBEE and SDB self represented small business: socioeconomic status that primes may cite toward socioeconomic evaluation criteria on federal solicitations.
- Production Microsoft 365 multi tenant administration experience: direct production responsibility across regulated client portfolios, not academic exposure.
- Lean operational profile: single accountable owner pattern reduces bench management overhead for primes; ideal for smaller named sub roles or specific labor categories.
- Cross domain compliance experience: HIPAA + PCI + CJIS breadth is uncommon in single practitioners; useful for primes presenting compliance driven proposals.
- Native American Owned: supports federal tribal preference and minority business participation goals.
- Microsoft Cloud Partner Program: evaluating enrollment ahead of CSP eligibility milestones.
- Federal procurement cycle literacy: Army DTSPO M365 Records Management RFI submitted May 2026; ongoing Sources Sought / RFI monitoring across primary NAICS. Reads PWS documents and writes federal-grade technical responses.
Engagement Availability
- Labor categories: Senior Microsoft 365 Engineer, Senior Cyber Engineer, Senior Network Security Engineer, Senior Systems Engineer, Compliance Engineer, Microsoft 365 Records Management and eDiscovery Specialist, Virtualization / VMware Engineer
- Engagement model: 1099 subcontractor at prime's labor rates, FFP task assignments, or Time-and-Materials
- Availability: Part time, by arrangement
- Facility Clearance (FCL): None held. Personnel Clearance (PCL): US citizen; eligible for clearance sponsorship at applicable levels per investigation findings.