About

Secure IGA is my independent contract company for identity governance and access management. Companies bring me in for a defined engagement when they would rather not rely only on internal resources, or on a vendor, for sound guidance.

My career started over thirty years ago in software and hardware development, then moved through systems and infrastructure engineering. Identity was part of every one of those roles, because it is the one thing every level of a business shares. It has been the center of my work since.

My focus is how people and systems get in: how access is requested, approved, reviewed and removed. That covers single sign-on, MFA, passwordless and phishing-resistant sign-in, roles, least privilege and access reviews. The work is built on Zero Trust, with controls mapped to NIST, SOX and ISO.

I've worked in the federal government, healthcare, non-profits, franchisors, food manufacturing, game development, startups, and companies going through mergers and acquisitions. Much of that work has been public company readiness, compliance, audit preparation, professional services engagements and migrations.

The environments range from greenfield builds to legacy on-premises systems, hybrid and disconnected multi-cloud infrastructure, multiple physical locations, post-merger directories and high-assurance federal systems.