Enterprise & Solution Architecture
Target and project start architectures, HLDs and LLDs, architecture principles and governance using TOGAF and ArchiMate, within Dutch government reference architectures such as NORA, GEMMA and HORA.
IT consultancy · Architecture · Cloud · Security · AI infrastructure
Architecture that makes complex IT work.
Enterprise and solution architecture, cloud and hybrid infrastructure, digital workplace, security and private AI infrastructure. For organisations where continuity, security and successful delivery matter.
01 Project experience
Experience within organisations where technology matters.
Project experience at and for organisations in central government, parliament, healthcare, education, energy and telecoms.
Parliament
Central government
Higher education
Central government
Higher education
Healthcare
Central government
Energy
IT services
Municipality
Public agency
Energy
Telecom
Telecom
02 Besli IT Services in numbers
- years of in-house IT experience
- 25+
- years of architecture engagements
- 15+
- years serving Dutch central government
- 10+
- users in our largest enterprise environment
- 32,000
03 Expertise
From architectural decision to operational service
We work end to end, from strategy and target architecture down to data centre, network and security. That keeps our advice grounded in what is technically feasible.
Cloud & Hybrid Infrastructure
Azure and hybrid cloud architecture, including Azure Local and Azure Stack HCI, data centre, servers, storage and connectivity. Designed according to the Well-Architected and Cloud Adoption Frameworks.
Digital Workplace & Microsoft 365
Workplace architecture for thousands of users: Microsoft 365, Windows 365 Cloud PC, Azure Virtual Desktop, Citrix and remote management, including security requirements and legacy decommissioning.
Security Architecture & Resilience
Security by design in high-security environments: information security plans, risk assessments, hardening and vulnerability management. Aligned with the Dutch BIO and BIR security baselines, NEN 7510 and ISO 27001/27002.
AI Infrastructure & Private AI
Architecture for private AI: central model serving, GPU capacity and workload isolation, multi-GPU inference and a governance layer that decouples agents and applications from the underlying model.
Transformation & Migration
Carve-outs and migrations of end-user environments, applications and data. Complex legacy landscapes move step by step to a new architecture, including supplier transitions.
04 Featured project experience
Engagements where continuity and security were paramount
Parliament · 2024-2025
W365Cloud PC taken into production
Solution Architect Digital Workspace
A secure, future-proof digital workplace for parliament
- Challenge
- Evolving the digital workplace landscape on Microsoft 365 and cloud, plus the hybrid cloud platform Flexinfra on Azure, Azure Stack HCI and Azure Local.
- Contribution
- Architecture frameworks and guidelines, transition roadmaps, start architectures, high-level and low-level designs (HLD/LLD), architecture assurance of projects, and the Windows 365 Cloud PC architecture including security requirements.
Digital workplaceHybrid cloudWAF & CAFIaC
Central government · 2013-2016
50+heads of state at the Nuclear Security Summit
IT Architect
High-security IT services for the Nuclear Security Summit and the EU Presidency
- Challenge
- A high-security enterprise solution for more than 50 heads of state, 1,000 delegates, 3,000 journalists and staff, followed by the Dutch EU Presidency in 2016.
- Contribution
- Designed and built the solution, including the project start architecture, high-level design and requirements specification, reviewed the technical information security plan and carried out risk assessments aligned with the Dutch BIR and VIRBI baselines and ISO 27001/27002.
Security architectureHigh-secureBIR & VIRBI
Central government · 2014-2018
16ministries and departments on one standard workplace
Infrastructure & Workplace Architect · IT Security Expert (NCTV)
One high-security workplace for 16 ministries, and secure infrastructure for international information exchange
- Challenge
- Civil servants from 16 ministries and departments needed one standard, secure workplace, accessible through remote access. At the NCTV the focus was secure infrastructure for information exchange with international partners.
- Outcome
- The workplace solution was independently audited by Fox-IT and Hoffmann against the implemented security requirements.
Security by designIntegrationBIR & ISO 27001
Higher education · 2019-2021
32,000users in one enterprise environment
IT Architect
An enterprise solution for students, lecturers and researchers
- Challenge
- A solution for 26,000 students and 6,000 staff, plus a separate programme to improve services for researchers, including a shadow IT inventory.
- Outcome
- Following a project start architecture, requirements specification, HLD, RFP and proofs of concept, we recommended and rolled out Microsoft 365, Azure, Azure Virtual Desktop, Jamf and Citrix.
Enterprise architectureHybrid workplacePoC-driven
Healthcare · 2022-2024
3hospital sites in one modernisation programme
Solution Architect
ICT Next Level programme: a modern, standardised hospital landscape
- Challenge
- Modernising a landscape with many medical systems, suppliers, integrations and compliance requirements, spread across Hoorn, Purmerend and Enkhuizen.
- Contribution
- Solution architectures, Microsoft 365 architecture, migrations to the virtualised data centre, network and firewall lifecycle, assurance of NEN 7510 and GDPR, and maturing the architecture function.
Solution architectureNEN 7510Multi-vendor
More project experience
Gemeente Súdwest-Fryslân
Four interdependent replacement programmes for around 1,780 users, each developed into three options and brought together in one advisory report with a roadmap. The client then asked for board-level advice on its Microsoft 365 tenant strategy.
Omgevingsdienst West-Holland
Technical project leadership for the transition to a new supplier: carve-out, migration to new cloud infrastructure and workplace, and establishing the retained service integration (SIAM) function.
TU Delft
Digital Workspace: solution designs within the university architecture and a management vision for the new workplace, building on the concept developed with Leiden University and Erasmus University.
Nuon, Alliander, Ziggo and Casema
Carve-out and migration during the Nuon split (6,500 workplaces, the Netherlands and Germany), disaster recovery at Alliander, and the merger of Casema, @Home and Multikabel (7,000+ workplaces).
Private Model-as-a-Service platform
A private AI platform designed and built by us on professional NVIDIA GPU hardware. Models are available as a service through a central service layer, with GPU partitioning, multi-GPU inference, a control plane with guardrails and more than twenty services exposed via the Model Context Protocol.
05 Approach
Architecture is only good if it can be delivered
Advice has to be technically feasible, fit the organisation’s frameworks and have the buy-in of those who decide, deliver and operate.
Understand
Assess ambitions, needs, capabilities and constraints in workshops with leadership, architects and specialists.
Define the architecture
Start and target architecture, principles and frameworks, documented in project start architecture, HLD and LLD.
Validate scenarios
Compare solution options on cost, risk and lead time, and test them with measurable proofs of concept.
Support decision-making
Clear advisory reports, roadmaps and tender documents (requirements, RFP, selection criteria).
Oversee delivery
Assure projects against the architecture, manage exceptions and keep suppliers aligned.
Hand over and embed
Documentation, knowledge transfer and an architecture function that can stand on its own afterwards.
06 Regulated and critical environments
Where availability and confidentiality are non-negotiable
- 01
Central government & parliament
Architecture-led delivery within Dutch government reference architectures and the BIO and BIR security baselines.
- 02
Municipalities & public agencies
Scenarios, tendering and supplier transitions.
- 03
Healthcare
Medical systems, multi-vendor integrations and NEN 7510.
- 04
Education & research
Workplace concepts and research services at scale.
- 05
Energy & telecoms
Carve-outs and migrations involving thousands of workplaces.
07 Specialist-led delivery
The right expertise around the challenge.
Besli IT Services delivers specialist engagements independently. For larger programmes we assemble a multidisciplinary team of selected senior experts from the relevant domain, depending on the challenge.
You always work with experienced specialists, without the overhead of a large firm.
08 About Besli IT Services
Independent, pragmatic and technically grounded
Besli IT Services B.V. is a Dutch IT consultancy. We turn strategic and executive ambitions into architecture that genuinely moves an organisation forward.
With more than 25 years of IT experience and over 15 years of architecture engagements, we work under architecture using TOGAF and ArchiMate. We are as comfortable with executive decision-making as with data centre, network and security.
TOGAFArchiMateCISSPITILPRINCE2Azure WAF & CAF
09 Client feedback
What clients and project leads tell us most often
Complex technical challenges are explained clearly, including to non-technical stakeholders.
From need to design
Functional needs are clarified precisely and translated into a technical design that fits the organisation.
Calm under pressure
In urgent situations the approach stays calm, solution-focused and well prioritised.
Reliable and committed
Commitments are met, with strong ownership of the outcome.
10 Frequently asked questions
When is Besli IT Services the right partner?
When should you engage Besli IT Services?
For challenges where strategy, architecture and technology meet: a target architecture or roadmap, a tender that must be technically sound, a workplace or cloud transition, a security-by-design question, or setting up private AI infrastructure.
Does Besli IT Services work independently or with a team?
Both. We deliver specialist engagements independently. For larger programmes we assemble a team of selected senior experts around the challenge.
Which architecture disciplines do you cover?
Enterprise, solution, infrastructure, application and security architecture, plus architecture for cloud, digital workplace and AI infrastructure. Deliverables include project start architectures, HLDs, LLDs, requirements, target architectures and roadmaps.
Which organisations do you work for?
Mid-sized and large organisations with complex or regulated IT, such as central government, municipalities, healthcare, education and research, and enterprises with critical infrastructure.
Which architecture methods and reference frameworks do you use?
We apply TOGAF and ArchiMate, within Dutch government reference architectures such as NORA, GEMMA and HORA. Cloud designs follow the Well-Architected and Cloud Adoption Frameworks.
Which security standards do you apply?
Security architecture aligned with the Dutch BIO and BIR security baselines, NEN 7510 and ISO 27001/27002, including information security plans, risk assessments, hardening and vulnerability management.
Can you support a public tender?
Yes. We prepare tender documents such as requirements specifications, RFPs and selection criteria.
What is the difference between a PSA, HLD and LLD?
A project start architecture (PSA) sets out the frameworks and principles for a project. A high-level design (HLD) describes the solution in outline; a low-level design (LLD) details it to the level needed for implementation.
Do you support Microsoft 365, Windows 365 or Azure Virtual Desktop?
Yes. We design workplace architecture for thousands of users with Microsoft 365, Windows 365 Cloud PC, Azure Virtual Desktop and Citrix, including security requirements and legacy decommissioning.
Do you work with hybrid cloud and Azure Local?
Yes. We design Azure and hybrid cloud architecture, including Azure Local and Azure Stack HCI, covering high availability, disaster recovery and infrastructure as code with Bicep and Terraform.
What do you mean by private AI infrastructure?
AI models running within your own environment: central model serving, GPU capacity and workload isolation, and a governance layer that decouples agents and applications from the underlying model.
Do you have hands-on private AI experience?
Yes. We designed and built our own private Model-as-a-Service platform on NVIDIA GPU hardware, with more than twenty services exposed through the Model Context Protocol.
What does an engagement look like?
Six steps: understand, define the architecture, validate options with proofs of concept, support decision-making, oversee delivery, and hand over and embed.
Do you guide delivery, or only advise?
Both. We assure projects against the architecture, manage exceptions and keep suppliers aligned.
Are you vendor-independent?
Yes. Our advice is based on your organisation's constraints and needs, not on a product portfolio.
How do I get in touch?
Email info@besli-it.com for a no-obligation conversation about your situation, your constraints and a possible approach.
Want to discuss a complex IT challenge?
Get in touch for a no-obligation conversation about your situation, your constraints and a possible approach.