Architecture you can trace from policy to platform.
Crimsonbase IT supports UK government, healthcare and commercial organisations with architecture, security design, operating models and business cases that stand up to scrutiny.
What I do
-
Architecture and business cases
Target architectures, target operating models and options appraisal, modelled in ArchiMate 3 (Archi, automated with jArchi) so views stay consistent. Evidence for strategic, outline and full business cases, with options and costs tied back to the model, and the standards and decision records that keep delivery on the target state.
-
Security architecture and review
Secure-by-design solution architecture, with threat modelling and security views in the model. An architecture-led review of a service against the NCSC Cyber Assessment Framework outcomes: a design review, not a penetration test or formal audit. Cyber Essentials readiness for small suppliers: I prepare you for the assessment; certification is awarded by an accredited body.
-
Cloud, data and FinOps
Hosting, integration and data designs for cloud platforms, covering resilience, access, data protection, cost control and exit options. Cost control is backed by FinOps certification.
-
Legacy modernisation roadmaps
Map an ageing estate in ArchiMate, show dependencies, risk and cost of staying put, then set out sequenced options so technical debt is handled as a plan rather than a reaction.
-
Design authority and technical assurance
Independent review of supplier designs and delivery plans, with clear findings for programme boards.
Where I work
Central government
Architecture and business case support for departments and arm's-length bodies: target operating models, capability maps, options appraisal and design authority, from outline to full business case.
Healthcare
Solution and data architecture for NHS and health programmes, with security design that protects patient data.
Private sector
Enterprise architecture, integration and platform selection for property, financial services, telecoms and professional services organisations, including support for mergers and acquisitions and application rationalisation.
Selected clients
Defra and the Environment Agency
Lead solution architect on national programmes since 2018: digital waste tracking, EU Exit common components, and more recently spatial planning, livestock information and flood risk file management.
Home Office
Programme architect for National Identity and Access Management: architecture backlog, supplier and stakeholder management, and technical assurance reported to sub-board level.
NHS Blood and Transplant
Solution architecture to replace organ donation desktop and mobile applications on a low-code platform, spanning applications, data, integration and cloud.
HCA Healthcare
Solution design, integration and identity for a high-profile enterprise scheduling and practice management deployment.
Nursing and Midwifery Council
Architecture governance for a half-completed transformation: a design process for decoupling the registration system into Dynamics 365, an integration roadmap and a legacy archiving strategy.
Places for People
Enterprise architecture discovery across a group of 20+ companies to support M&A strategy: current landscape, platform options and application rationalisation.
Intellectual Property Office
Solution architecture for customer-facing and back-office transformation, mapping capabilities to requirements and designing the integration layer on cloud platforms.
Three (via IBM)
End-to-end solution architect on a mobile operator transformation programme: integration with central billing systems, solution design, risks and costing.
The Co-operative Bank (via IBM)
Took business requirements through to statements of work and high- and low-level designs, with a flexible service-oriented infrastructure and cloud and SaaS components.
FirstPort
Short review of business and system processes for a property management company: as-is and to-be analysis, gap analysis and a remediation roadmap.
Earlier work includes Sussex Police, DWP, NHS Shared Business Services, Reuters and Merrill Lynch Commodities.
Meet Nexus Steward
Nexus Steward is the Crimsonbase IT business performance platform. It gives you one governed definition of every metric, modelled scenarios and board-ready reporting, so decisions are tested before they are made.
Early access is open.
Ask about Nexus StewardHow an engagement runs
Discover
Establish the outcomes, constraints and existing estate before drawing anything.
Model
Build the baseline and target architecture in ArchiMate, with each element owned and sourced.
Decide
Appraise options against the model and write the case that supports the decision.
Govern
Keep delivery on the target state with standards, reviews and a model that stays current.
Who you will work with
- 25+ years
- In IT, including 15+ in enterprise and solution architecture
- TOGAF 9.1
- Certified architect
- Brighton
- Working across the UK
- FinOps
- Certified Practitioner, The Linux Foundation. Verify on Credly
Crimsonbase IT is led by Richard Shaw, a TOGAF-certified enterprise and solution architect. His work covers target operating models, capability mapping and evidence-based business cases, with deep ArchiMate 3 and jArchi experience.
Experience across UK central government, healthcare and the private sector:
Richard also runs Nexus Blueprint, an executive coaching and mentoring practice for business leaders.
How to begin
Intro call
Thirty minutes to understand the programme, the decision and the deadline.
Scoping note
A short written note setting out the approach, the outputs and the effort involved.
Agree and start
Agree the scope and commercial terms, then begin.
Talk to Crimsonbase IT
Tell me about the programme, the decision you need to make and the date it is due.
richard@cb1t.ukPrivacy notice
Who we are. Crimsonbase IT Limited (company number 07878942) is the data controller for this website. Contact: richard@cb1t.uk.
What we collect. This site has no forms, accounts, analytics or advertising cookies. If you email us, we receive your email address, your name if you give it, and whatever you write. Our web host may keep standard server logs, including IP addresses, for security and to run the service.
Why, and our lawful basis. We use your email to reply to you and to discuss work you may want to commission. Our basis is legitimate interests in running the business and, where you ask about a service, steps taken at your request before a contract.
Who sees it. We do not sell your data. It is held by our email and hosting providers, who process it on our behalf. We share it with others only where the law requires.
How long. We keep enquiry emails only as long as needed to deal with them and for ordinary business records, then delete them.
Your rights. You can ask to see, correct or delete your data, to restrict or object to its use, and to complain to the Information Commissioner's Office at ico.org.uk. Email us to use any of these rights.
Last updated 10 October 2026.