Articles on identity, Zero-Trust and AI security
Patterns, decision frameworks and lessons from real programmes. Opinions are my own. Every article is shared on LinkedIn - join the discussion there.
Tiered Administration: Defending Active Directory's Crown Jewels
Attackers do not hack in, they log in and move up. The tiered administration model - Tier 0 isolation, PAWs and credential hygiene - remains the highest-value control set in any hybrid AD estate.
Read article →CIAM Is Not Workforce IAM: Designing External Identity That Converts and Complies
Workforce IAM manages people you pay; CIAM courts people who can leave. Journey design, progressive profiling, GDPR-aligned consent and B2B federation - and why treating customers like employees fails at both security and revenue.
Read article →OAuth 2.0, OIDC, SAML: An Architect's Field Guide to Federation Protocols
Which protocol, when, and the failure modes in between. A working decision guide for application onboarding, written from the position of the person who has to govern the estate afterwards.
Read article →Your Diagram Is the Architecture: Documentation as a First-Class Deliverable
Undocumented architecture is opinion. Twenty years of HLDs, LLDs and ArchiMate models distilled into a documentation stack that survives handover, audit and your own departure.
Read article →Have an identity challenge worth solving?
I take a small number of freelance and contract engagements each year.