The Craftwork Group
Contact →
Industries We Serve

Your industry has specific problems.
We engage with them specifically.

TCG works across SMB verticals — automotive, healthcare, legal, construction. Engineers who understand your environment.

Talk to an Engineer →
7+
verticals served
100%
engineer-led
Local
presence & response
Construction & Real Estate
Project files, jobsite connectivity, and field teams that can't wait for IT
"Our project files are in three different places depending on who started the project. Half the team works on-site and uses mobile data because the office Wi-Fi is a mess."
Construction and real estate firms manage expensive project data across distributed teams, often with minimal IT investment until something breaks. We help consolidate project data into defensible storage, build reliable jobsite connectivity, and set up device management that works for teams that are rarely at a desk. We focus on practical outcomes — not IT for its own sake.
  • File server and cloud storage consolidation
  • Reliable Wi-Fi and cellular failover for offices and sites
  • Mobile device management for field teams
  • Project data backup with versioned recovery

We work with construction and trade supply firms running Procore, Autodesk, Bluebeam, and Xactimate — and with teams that have never used any of them. Field connectivity, crew device management, and project file reliability are where we spend most of our time. We know what a superintendent actually needs from IT on a Monday morning.

Automotive Dealerships
DMS, F&I systems, and the network holding it all together under one roof
"Our DMS vendor wants to connect directly to our network, our F&I software is cloud-only, and nobody knows what’s actually talking to what."
Dealerships run on interconnected systems — DMS, F&I platforms, service management, inventory feeds, and OEM portals — that were never designed to coexist cleanly. We help dealerships build the network foundation that holds these systems together, segment access so a vendor breach doesn’t become your breach, and establish the documentation that turns a hairball into a manageable environment.
  • DMS and F&I platform network integration and segmentation
  • OEM portal access with vendor isolation
  • PCI-aware network architecture for payment systems
  • Service department Wi-Fi and device management
Architectural Firms
Large project files, remote collaboration, and the rendering workstation nobody backed up
"We lost three weeks of work when a designer’s laptop died. The project files were local because the NAS was too slow for Revit."
Architecture and design firms work with large, version-sensitive project files that need to be accessible to distributed teams without sacrificing performance. We build the storage and collaboration infrastructure that lets your team work on Revit, AutoCAD, and render pipelines without fighting the network — and we make sure the backup actually covers what matters before the next disaster, not after.
  • High-performance file storage for CAD and BIM workflows
  • Reliable remote access for distributed project teams
  • Render workstation and GPU infrastructure
  • Project archive and version-controlled backup
Healthcare-Adjacent
PHI, audit trails, and infrastructure that can't be experimental
"We're not a hospital, but we touch patient data. We need to be compliant, but our MSP treats us like a small business."
Mental health practices, medical billing firms, care coordination services, and other healthcare-adjacent organizations operate under HIPAA requirements without the IT budget of a health system. We build PHI-aware infrastructure: access logging configured to actual audit requirements, encryption at rest and in transit for every system that touches patient data, BAA-compatible architecture, and vendor evaluations that produce written documentation of your posture. We don't claim certifications we haven't earned — that's not how we operate, and it's not what you need. What you need is an environment built to hold up under scrutiny. That's what we deliver.
  • Access logging and audit trail configuration
  • Encryption at rest and in transit for PHI systems
  • Secure file transfer and collaboration workflows
  • BAA-compatible infrastructure and vendor evaluation

We’ve worked with mental health practices, medical billing firms, and care coordination services across the Pacific Northwest. Common needs: EHR vendor compliance documentation, BAA-compatible file storage, after-hours incident coverage when a system touches patient scheduling or billing. Our work doesn’t require your staff to become IT-literate — just reliable.

Manufacturing
Operational technology meets IT — and neither can go down
"Our plant floor and our business systems are on the same network. Nobody documented that, and now we're terrified to touch anything."
Manufacturing environments carry infrastructure debt that accumulates invisibly until a network change or a vendor upgrade reveals it all at once. We help manufacturers document and segment their environments, modernize site networking across multiple facilities, and build recovery procedures that account for the reality that a line stoppage has a dollar cost per minute.
  • Multi-site network modernization and segmentation
  • OT/IT boundary documentation and hardening
  • Backup and DR for line-critical systems
  • Vendor access controls and jump server configuration
Professional Services
Client data, strict compliance, and a team that's never in the same place twice
"We have lawyers working from four states, client data in three systems, and our IT person just left. Everything is held together by tribal knowledge."
Law firms, accounting practices, consultancies, and similar businesses run on trust. A data incident or a compliance gap is an existential risk, not just an IT problem. We build identity management, device policy, and secure remote access that holds up when a team is distributed and client confidentiality isn't optional.
  • Identity consolidation (Entra ID, SSO, MFA enforcement)
  • Secure remote access without VPN complexity
  • Device management and endpoint policy
  • Data classification and access controls for client data
AI & ML Research
GPU infrastructure, data pipelines, and environments that researchers can actually use
"We have a $400K GPU cluster and it's been idle for six weeks because nobody could get the networking right."
AI and ML workloads have infrastructure requirements that most MSPs have never seen: GPU passthrough, high-throughput storage, RDMA networking, container orchestration for inference, and the security requirements that come with proprietary model weights and training data. We've built and operated these environments. The H100 cluster in production isn't a case study — it's our reference architecture.
  • GPU cluster design and Proxmox deployment
  • vLLM, Ollama, and inference stack configuration
  • High-throughput NVMe and ZFS storage for training data
  • Air-gapped model deployment and secure API exposure
Nonprofit & Education
Mission-critical operations on a constrained budget — done honestly
"We can't afford what the big firms charge, but we also can't afford to have our donor database go down during a campaign."
Nonprofits and educational organizations carry the same infrastructure risks as any business — ransomware, data loss, system outages — with less budget to absorb them. We scope honestly to what your budget can actually sustain, prioritize the risks that would hurt most, and build runbooks your team can execute without us. We also know where to find licensing programs and nonprofit-rate infrastructure that most MSPs don't bother to source.
  • Microsoft 365 Nonprofit and Google Workspace for Nonprofits setup
  • Ransomware-resistant backup architecture
  • Donor and constituent data protection
  • Sustainable IT plans that match what you can actually spend

Nonprofits with 15 to 100 staff are a sweet spot for us — large enough to have real infrastructure risk, constrained enough to need a firm that scopes honestly. We know the donor database, the grant compliance audit, and the three-day campaign window that can’t go down. We also know where to find nonprofit licensing rates that most MSPs don’t bother to source.

Across Every Industry

What every engagement has in common

Regardless of sector, the same structural commitments apply to every client relationship.

Named engineer accountability
You know who's responsible for your environment. Not a ticket system, not a support tier — a person. That accountability shapes every decision we make about your infrastructure.
Documentation as a deliverable
Every engagement produces runbooks your team can execute. We don't build environments that require us to operate them. The goal is your independence — not your dependency.
Month-to-month after 90 days
Managed services move to month-to-month after the baseline period. You stay because the value is there, not because a contract requires it. We stay accountable the same way.
No vendor commissions
We recommend tools we've run, calibrated to your environment and budget. We don't get paid when you buy a product, so our recommendations don't have a margin motive behind them.
Root cause, not symptom management
We don't close tickets when the symptom disappears. We track failures to root cause, document what happened, and fix the underlying condition. If we don't know why something failed, that's unfinished work.
Straight answers
We'll tell you when a technology isn't right for your situation — even if we could implement it. We'd rather have a difficult conversation upfront than a failed project six months in.
Recent Work

What it looks like in practice

Manufacturing · Network
6-Site Network Modernization, Zero Downtime
A Pacific Northwest manufacturer with six facilities was running aging switched infrastructure with no documented topology. We replaced the core and edge switching with Meraki, established site-to-site VPN, and implemented network segmentation between OT and business systems — across all six sites, without a single line stoppage.
Professional Services · Identity
200-User Identity Consolidation, 100% MFA in 60 Days
A distributed professional services firm was running a mixed Active Directory and legacy SSO environment with inconsistent MFA enforcement. We consolidated identity to Entra ID, enforced Conditional Access policies, and reached 100% MFA enrollment across 200 users in 60 days — with zero service interruptions and a documented rollback path for every stage.
AI Research · Infrastructure
4×H100 Inference Cluster, Air-Gapped, Production in 6 Weeks
A Pacific Northwest organization needed on-premises AI inference with GPU isolation, multi-tenant access, and no external network exposure. We deployed Proxmox VE with GPU passthrough to RHEL 9, configured vLLM for multi-model serving, built a WireGuard mesh for API access, and delivered a production cluster from bare metal in under six weeks.

Your industry has specific problems.
We'll engage with them specifically.

Don't need a managed service pitch — just want to talk through what you're running and whether we're the right fit? That works too.

Start the Conversation About TCG
Get In Touch

Tell us about your environment

No pitch. Tell us what industry you're in, what's not working, and what you need — we'll tell you honestly if we can help and how.

Email
hello@craftworkgrp.com
Phone
(425) 648-5250
Location
21019 66th Ave. S
Kent, WA 98032
Hours
Monday–Friday, 8am–6pm PT
After-hours support available for active clients — we pick up.