YOSJ also generally avoids SAP security (i.e., PFCG) whenever possible.
YOSJ can put you in touch with people who do these things.