Live3 Discovery slots open this week — book before Friday for May kickoff.Book now →
ServicesIndustriesApproachInsightsAbout Book Discovery
About · Engineering practice

Built by a security-trained engineer who knows what audits feel like.

ASJ IT Solutions exists to give growing mSMEs and professional services firms the kind of technology operating system that regulated, audit-heavy environments already take for granted — without the bureaucracy or price tag that usually comes with it.

The work, not the person

Built and run by senior engineers — by design.

ASJ IT Solutions is led by a security-trained engineer with production experience in regulated, audit-heavy environments — financial services, healthcare-adjacent data, and identity systems. We brought that operational discipline to a firm sized for the mSMEs and professional services teams that need it but can't yet justify a full in-house engineering hire.

Discovery is run by senior team. The person you talk to before signing anything is qualified to scope, recommend, and commit on the spot. No junior gatekeepers; no context lost in handoffs. We deliberately keep the brand quieter than the work — the systems we ship are the case for the practice.

Follow on LinkedIn

Why ASJ exists

Most IT consultancies serving small and growing firms have a structural problem: they make money on time spent, which means the longer something takes the better it is for the consultancy. The result is a marketplace full of engagements that drift, contracts that fatten with "scope discovery," and clients who only really know what they paid for in retrospect.

Regulated environments don't get to work that way. When the auditors arrive, vague engagements and "we'll figure it out as we go" delivery don't survive contact with reality. Every decision needs to be written down. Every change needs a paper trail. Every deployment needs to be reversible. The discipline is uncomfortable at first, then it becomes the thing that keeps the business out of trouble.

ASJ exists to bring that discipline — the parts of it that actually create value — to firms that aren't yet operating under the same regulatory weight. The engagements run on fixed-fee scopes. The deliverables are written down before work starts. The deployments are documented. The handovers are clean. None of this is novel; it's just rare at this firm size.

How we work

Three principles you'll see in every engagement, large or small:

1. Discovery is free. Decisions are written.

Every engagement starts with a 30–45 minute Discovery call — free, no card, no commitment. We follow up by email with a written recommendation. If we're a fit, the next step is a paid scoping brief or a fixed-fee project proposal. Everything material is in writing before any work starts.

2. Fixed-fee, milestone-based delivery.

Project work — like custom software or AI automation — is priced per milestone, agreed in advance. Recurring partnerships are flat-monthly retainers. We do not bill by the hour for fixed-scope work. The incentive needs to point the same direction as the outcome.

3. Designed to be replaceable.

Every system we build comes with documentation written for the engineer who comes after us — architecture diagrams, runbooks, credential inventories, known issues, recommended next steps. If you want to take the keys and run it yourself, you can. If you want us to keep operating it, we will. The choice is yours, not ours.

Where we are

ASJ IT Solutions OPC is registered and headquartered in Lucena City, Calabarzon, Philippines. We serve Philippine clients locally and international clients across markets that overlap APAC, Australia, EU, and US time zones. Hardware procurement is Philippines-only; software, AI automation, and Managed Tech Partner engagements work remotely worldwide.

A note on cybersecurity

ASJ applies engineering security hygiene to everything we build and operate — MFA enforcement, least-privilege access, secret management, secure-by-default web headers, parameterized queries, audit logging. That hygiene is the floor, not a product.

Cybersecurity-as-a-product engagements — penetration testing, ISMS implementation, ISO 27001 readiness, SOC 2 readiness, vCISO advisory, and security training — are not part of ASJ IT Solutions. They are a separate discipline with separate operational standards. If an engagement needs that depth, we will say so during Discovery and point you to a qualified provider.

What we will and won't do

We will tell you "you don't need this yet" when you don't. We will not push you toward the highest-margin engagement model. We will tell you when an automation will save less than it costs to maintain. We will not deploy AI-generated decisions into legally binding contexts without explicit human sign-off. We will not bend the engineering practice to compress a timeline that's been compressed for non-technical reasons.

That is the work, written down.

Let's talk

Bring the problem. We'll bring the plan.

Free 30–45 min Discovery. Founder-direct.