Services

Analysis, architecture, direction.

I help large organisations and government bring a PAM or IGA programme back into motion. I work as analyst, architect or lead. Implementation and configuration stay with your own engineers or your implementation partner; I make sure they build the right thing, in the right order.

01

Privileged Access Management

From a purchased product to privileged access under control.

Most PAM programmes do not lack a product. They lack scope, ownership and an order of work. The licence is there, the vault is running, and still a large share of the admin accounts lives outside it. I bring the programme back into motion: which accounts come first, who owns them, and what operations needs to really run it.

Platforms
BeyondTrust (specialism)CyberArk
What I do
  • Analysis of where your PAM programme stands: scope, coverage, ownership and operations
  • PAM architecture and design choices, with BeyondTrust as my specialism and experience with CyberArk
  • A prioritised onboarding approach: the accounts that matter most come first
  • A lead or architect role in the programme, directing your implementation partner
  • Handover to operations, so PAM is run and not just installed
02

Identity Governance & Administration

The foundation: who can do what, and why.

An IGA platform that has run for years often carries years of exceptions. Roles nobody can explain, reviews that are approved without being read, a joiner-mover-leaver process with manual detours. I bring back the overview and a model people can work with. Vendor-independent.

Platforms
OmadaOne IdentityVendor-independent
What I do
  • Analysis of the current role model, lifecycle processes and access reviews
  • A role and authorisation model the business understands and can own
  • IGA architecture and roadmap, independent of the platform
  • A lead or architect role, directing your implementation partner and internal teams
  • Governance: who decides, who owns, who reviews
03

Identity Health Check

The place to start.

A short analysis of your PAM or IGA programme with a fixed scope. No long assessment and no thick report. In a few days you know where you stand and what needs to happen first.

What I do
  • A clear picture of where your programme stands
  • The main risks, in plain language
  • A prioritised list of what needs to happen first
More about the Identity Health Check
04

IAM architecture, direction and tool selection

One picture of where you are going, and someone who keeps the course.

Identity touches every system and every department. Without a shared target architecture each project optimises for itself. I set out the target picture, help you choose tooling without a vendor’s interest, and keep direction over the programme and the parties that deliver it.

What I do
  • A target architecture for IAM, with PAM and IGA in relation to each other
  • Independent tool selection: requirements, shortlist, evaluation and advice
  • Direction over the programme and its suppliers
  • A sparring partner for the CISO, IAM manager and programme manager
05

AI agent identity

An agent is a new privileged identity.

AI agents act on their own, with access to data and systems. That makes an agent a privileged identity, and it deserves the same control as a person: an owner, minimal rights and a log. Most organisations have this in place for people and are only starting on it for agents. I help you apply what you already know from PAM and IGA to this new kind of identity.

What I do
  • An inventory: which agents exist, what can they reach, and who owns them
  • Governance for AI agents: ownership, least privilege and logging
  • Fitting agents into your existing PAM and IGA architecture
  • Policy and guardrails before the number of agents grows
How you engage me

Three forms.

01

Analysis

A short, sharp look at where you stand. The Identity Health Check is the standard form.

02

Architecture

The target picture, the design choices and, where needed, an independent tool selection.

03

Direction and lead roles

I take the role of lead architect or programme lead for a period, until your own team carries it.

What I don’t do

I don’t offer implementation or configuration work. Your engineers or your implementation partner do that. I make sure the design, the priorities and the direction are right.

Not sure where to start?

Start with a 30-minute call or with the Identity Health Check.

Book a callIdentity Health Check