IAM TechSelected engagements
Real programmes, real scale — described at the sector level to respect client confidentiality. Numbers are rounded; specifics on request under NDA.
Consolidating years of regional identity sprawl into one global platform
Multiple, heavily-customised regional identity platforms had accumulated over years of independent decisions — inconsistent birthright access, and no single group-wide view of who had access to what.
Designed and led migration to a single global, SaaS-based identity governance platform. Produced the migration strategy for roughly 200 applications and 100,000+ identities, integrating multiple HR systems, Active Directory, and Microsoft Entra ID.
One global governance platform replacing several redundant regional ones, automated birthright provisioning and recertification, and a clear roadmap to decommission legacy infrastructure.
Unifying identity across multiple operating companies under one group
Several operating companies within the group each ran fragmented identity processes, with no unified view of employee, contractor, or privileged access across the business.
Designed and led delivery of a group-wide federated identity platform, migrating from a legacy on-prem system to a modern SaaS platform. Defined the joiner/mover/leaver model, Role-Based Access Control (RBAC) framework, and entitlement catalogue across multiple HR sources.
A single, group-wide identity platform covering permanent staff, contractors, and privileged users — with automated access requests across previously siloed operating companies.
An evidence-based platform decision, not a vendor relationship
An existing identity governance platform could no longer meet the business's needs, and senior stakeholders had lost confidence in the incumbent approach.
Ran a formal Request for Proposal (RFP) — building the requirements-to-vendor scoring matrix, then running structured proof-of-concept evaluations across three leading identity governance platforms, scored against the firm's actual requirements.
A defensible, evidence-based platform decision with senior stakeholder buy-in, plus a target operating model and migration strategy ready to execute.
Building governance from zero, against a live audit clock
No identity governance platform existed at all. Access was managed manually, with no segregation-of-duties controls for applications in scope of external audit.
Delivered the organisation's first identity governance platform from the ground up — a segregation-of-duties matrix for audit-critical applications, birthright provisioning, and recertification workflows.
A fully governed, auditable access model where none existed before — directly addressing findings previously raised in external audits.
Closing a years-old gap in third-party access governance
As part of a wider cybersecurity transformation, the business had no formal governance over contractor and third-party access — a growing risk as regulatory scrutiny increased.
Designed and delivered a global identity governance platform, including a dedicated third-party access governance capability covering contractor onboarding, certification, and vendor lifecycle — approved through formal architecture governance.
A consolidated, global governance capability with a formal, auditable lifecycle for every third-party identity — closing a gap that had existed for years.
Customer identity at national scale, migrated to the cloud live
The business needed a Customer Identity and Access Management (CIAM) platform capable of supporting millions of customer interactions, migrating to the cloud without disrupting live services.
Designed and delivered the technical architecture for a large-scale CIAM platform, including adaptive risk-based authentication, single sign-on, and a phased migration of integrated applications to the public cloud.
A modern, cloud-ready CIAM platform supporting federation and adaptive authentication across web and mobile channels at national scale.
Access governance where the evidence matters as much as the access
A global pharmaceutical and life sciences company needed an enterprise access governance solution — but in a GxP-regulated environment, every change to the platform also has to be formally validated, not just implemented.
Acted as lead architect designing and governing an access governance solution built on SailPoint IdentityIQ, integrated with ServiceNow, Workday, Active Directory, and Microsoft Entra ID — producing the high- and low-level designs, and delivering GxP validation documentation through a Kneat-based validation process alongside the technical build.
A governed, enterprise-integrated access model with formal validation evidence in place — meeting GxP expectations, not just working software.
Citizen identity federation for a national digital service
A UK government department needed to authenticate citizens claiming benefits through a large-scale digital service — verifying identity externally and securely, at national volume, without compromising citizen trust.
Acted as Oracle IAM Subject Matter Expert designing and implementing an external authentication and identity federation solution using Oracle Enterprise Gateway (OEG), Oracle Access Manager (OAM), and Oracle Identity Federation (OIF) — building SAML 2.0-based cloud federation to support both basic and complex citizen authentication journeys, and leading the build team through delivery.
A working, cloud-based identity federation solution supporting citizen authentication for a major government digital service, delivered as part of a wider national identity assurance programme.