Identity architecture for enterprises that cannot afford to get it wrong.
I help global organisations design, govern and modernise identity - across the Microsoft Identity Stack, Zero-Trust frameworks, identity governance, customer identity and the emerging discipline of AI and agent identity.
A design authority for identity at global scale
I currently serve as the single accountable design authority for identity at a global industrial group operating in over one hundred countries - owning strategy, roadmap, governance standards and solution design across a hybrid, multi-cloud identity estate.
My depth is the Microsoft Identity Stack: Entra ID, Active Directory, Entra ID Governance, Privileged Identity Management, Conditional Access and External Identities, connected to HR sources and IGA toolchains. My breadth is deliberately vendor-agnostic - the architectural patterns beneath Okta, Ping, SailPoint, Saviynt and others transcend any single product, which is exactly what objective platform decisions require.
Before identity became my specialism, I spent years across networks, compute, storage, data centres and PKI. I design identity architecture grounded in how infrastructure behaves in production, not how the datasheet says it should.
Current focus
Recognition
Stellar Award for Business Value (team award), Information Systems recognition programme, December 2025 - for the Google Identity Service implementation.
Beyond the work
Pianist, gamer, lifelong music listener - and a firm believer that the best architects never stop being students. There is always a new skill on the bench.
Recent writing
Practical perspectives on identity, Zero-Trust and AI security - written from the design authority's chair.
Fine-Grained Access Control: From Front-Door Security to Decisions That Understand Context
Most estates guard the front door and trust everything behind it. FGAC moves authorisation from 'can you enter the application' to 'can you see this record, this field, this row, right now' - and it is fast becoming the control that separates defensible architectures from hopeful ones.
Read article →Securing Enterprise AI Systems: A Zero-Trust Reference Architecture
A plane-by-plane reference architecture for securing chatbots, agentic AI, and multi-agent systems - distributed PEPs, a central PDP, and identity as the correlation key for everything. Aligned to NIST SP 800-207, XACML 3.0, OWASP LLM Top 10 and MITRE ATLAS.
Read article →Non-Human and Agentic AI Identity: Governing What You Cannot Interview
AI agents are joiners you never onboarded and leavers who never resign. Twelve months of writing enterprise IAM controls for AI taught me that agent identity is a lifecycle problem first and a technology problem second.
Read article →What colleagues and clients say
I have never met a more intelligent, dedicated, committed and technically capable individual... the quality of his documentation is better than any I have seen in my working career.
Craig’s knowledge of Microsoft technologies is exceptional, and his ability to create clear, comprehensive technical designs is among the best I have encountered... a highly capable and dependable architect, and I would welcome the opportunity to work with him again.
Craig is a completer finisher with natural abilities for quickly learning new technologies, working on his own initiative with vision and imagination to foresee business and cost benefits. I would not hesitate to hire him again.
A dedicated leading architect with excellent business and leadership skills... some of the best documentation standards and skills I have seen in the industry. Given the opportunity, would work with again in a heartbeat.
An enthusiastic and talented Technical Architect with in-depth knowledge of network, cloud and infrastructure architecture... his documentation and architectural artifacts are very high standard... he is and always will be a key member of any EA team.
His documentation and diagramming skills are very strong, and he provided some excellent systems documentation for us. He has a quick mind, and the ability to take on new technologies.
Simply outstanding depth of knowledge, intelligent dedicated team player, great asset to the team end to end. Would highly recommend Craig!
Comfortable working with Senior Management, be that CEO, Executive or Group Board members. His contribution to the IT Strategy is based on his knowledge and understanding of the business plans and the company’s direction.
He has singlehandedly been responsible for driving the IT technological advances made by the organisation and has transformed the IT architecture from that of an SME to that of a large commercial enterprise.
He consistently performed his duties in an exemplary fashion. I personally would have no hesitation in him joining my team again in the future.
In recognition of your dedication and commitment - outstanding efforts in the category Business Value with the Google Identity Service implementation team.
An enthusiastic technical specialist... pride and dedication in the work that he delivers... In my view Craig would be a future asset in any technical team.
Craig would always rise to the occasion... with his ability to pick up new skills and apply them unsupervised to a high standard I would happily recommend him.
A dedicated and talented engineer... punctual and efficient, he works well alone or as part of a team. I would gladly work with Craig again on a future project or venture.
I worked with Craig for over four years and he demonstrated excellent development skills - he was lead on several projects and a valued member of many others.
Quoted from written references, available on request. Further recommendations on LinkedIn.
Sectors I have delivered for
Directly and through consultancy engagements - including several under confidentiality that are described here at sector level only.
Have an identity challenge worth solving?
I take a small number of freelance and contract engagements each year.