Selected Work

Identity Programs Built and Documented in Production

Work spanning federal agencies, Fortune 50 enterprises, and regulated industries. Each engagement describes the environment as it was, the work that was done, and what changed.

These are working environments, not controlled conditions.

Hybrid infrastructure, inherited access debt, inconsistent enforcement, and compliance deadlines that do not move. The problems described here are common. The depth of the work is what varies.

01  ·  Privileged Access Management

Privileged Access Without Privilege Sprawl

PAM program design and implementation at a Fortune 50 retail enterprise. 32,000+ users across U.S. and U.K. operations. Standing admin access retired through architecture, not mandate.

Fortune 50 Retail  ·  HIPAA · NIST 800-53 Read →
02  ·  Zero Trust Architecture

Zero Trust Is an Architecture, Not a Product

Framework design across Azure, GCP, and M365 at a major media enterprise. A stated Zero Trust posture that did not match the actual environment. 70%+ reduction in standing privileges.

Media & Entertainment  ·  NIST 800-207 Read →
03  ·  CIAM Architecture

Identity at the Edge of Customer Trust

Customer identity platform design across a global legal information provider and a federal IP authority. Authentication failures in these environments are audit findings, not inconveniences.

Legal / Federal Gov  ·  FedRAMP · NIST 800-53 Read →
04  ·  PKI & Certificate Lifecycle

When the Certificate Breaks, Everything Breaks

Certificate expiration events are always predictable and almost always treated as emergencies. Turning that dynamic around across enterprise and federal environments through lifecycle automation and governance design.

Media & Federal Gov  ·  NIST 800-53 Read →
05  ·  Security Observability

Making the Environment Tell the Truth

Security observability via Splunk and infrastructure governance via Terraform across AWS, Azure, and GCP. Federal and enterprise environments where signal-to-noise ratio was the real risk.

Federal + Enterprise  ·  NIST 800-53 · FISMA Read →

Start with a conversation.

30 minutes. We determine whether there is a fit and follow up with a scoped proposal within 48 hours.

Schedule a Consultation