IAM architecture fixes
Stabilise fragile identity platforms and cut recurring incidents through connector, workflow, and integration redesign.
Available after 7 weeks' notice
I own, stabilize, and improve enterprise IGA platforms.
CISSP-certified engineer with 3+ years end-to-end ownership of a production Usercube platform for a major European aviation organisation. I cut incident tickets by 90%, reduce stale privileged accounts, and deliver integration work that holds up in regulated EU environments. Available for freelance contracts from 7 weeks' notice.
Need someone to own your IGA platform — not just advise on it?
- Rate
- €700–€750/day
- Based in
- Brussels | EU Remote
- Role
- IAM Consultant | IGA Platform Owner
- Certification
- CISSP
- 90%+
- fewer platform incident tickets
- 30%
- reduction in stale privileged accounts
- 500 hrs
- engineering time saved annually
- 3 years
- end-to-end Usercube IGA ownership
Why me
Why clients hire me
Most IAM freelancers focus on tools. I focus on how identity works across the entire enterprise landscape—from modern cloud platforms to legacy and operational systems.
- CISSP certified security professional
- Proven production platform ownership, not just project delivery
- 3+ years owning a production Usercube IGA platform
- Hands-on engineer, not only architect
- Experience in aviation, telecom, and enterprise environments
- Identity governance roadmaps aligned with NIS2, GDPR, and ISO 27001
- Able to work independently with minimal ramp-up
Problems I solve
Identity systems are fragile in most enterprises
I work with teams that need a specialist who understands enterprise identity chaos, can integrate quickly, and reduce risk without adding unnecessary process.
- Fragmented IAM systems across tools and business units
- Manual onboarding, offboarding, and access reviews
- Broken, inconsistent, or fragile SSO setups
- Over-permissioned access and standing privileged accounts
- Slow integration of new SaaS and legacy applications
Services
IGA platform ownership & improvement
Freelance support for teams that need someone to own, stabilize, and improve their identity governance platform — not just design slides for it.
Enterprise integrations
Connect directories, SaaS, and legacy systems to lifecycle workflows with traceable change and controlled rollout.
Access governance improvement
Design identity governance roadmaps and automate leaver and access-review processes aligned with NIS2, GDPR, ISO 27001, and audit requirements.
Contract engineering
Hands-on senior delivery in complex IAM environments when teams need implementation capacity, not slideware.
Technologies
IAM platforms & protocols
Production experience across IGA platforms, identity protocols, and enterprise tooling — the terms recruiters and hiring managers search for.
- Usercube
- Microsoft Entra ID
- Active Directory
- Azure
- LDAP
- SAML
- OIDC
- RBAC
- PowerShell
- ServiceNow
- ITIL
Proof
Enterprise IGA delivery in production
Measured outcomes from owning and improving a production Usercube platform, plus security architecture work across regulated industries.
Identity governance improvement
Aviation · Usercube IGA
- Challenge
- Manual access removal processes left privileged accounts active after employees left.
- Solution
- Automated leaver lifecycle workflows in Usercube and standardized identity data across integrated systems.
- Results
- 30% reduction in stale privileged accounts
- 500+ engineering hours saved annually
- Improved audit readiness
- Stack
- Usercube, RBAC, LDAP, PowerShell, ServiceNow
Usercube IGA platform operations
Aviation industry · Usercube
- Challenge
- A regulated Usercube IGA platform generated recurring incidents and teams depended on external support for integrations and troubleshooting.
- Solution
- Owned end-to-end technical operations and integration architecture, connecting enterprise applications, directories, and business systems to identity lifecycle processes. Prioritised operational improvements across workflows, connectors, and release management. All configuration, scripts, and connector logic lived in Git with peer-reviewable history.
- Results
- 90%+ reduction in platform incident tickets
- Owned end-to-end Usercube IGA operations and integrations across the enterprise estate
- Built demo and training environments with realistic datasets for onboarding and troubleshooting without touching production
- Onboarded and trained IAM engineers on Usercube operations, configurations, and incident response
- Applied each new Usercube release shortly after launch to limit technical debt and stay current on security capabilities
- Stack
- Git, Usercube, RBAC, SAML/SSO, LDAP, PowerShell, ServiceNow
Security architecture delivery
Packaging & telecom clients
- Challenge
- Security controls were fragmented across email security, network management, and incident handling in enterprise support environments.
- Solution
- Implemented risk management protocols, deployed centralised FortiManager/FortiAnalyzer in Azure, and integrated Cisco IronPort email security reporting.
- Result
- Improved visibility, stronger control over security operations, and more resilient day-to-day delivery across client environments.
- Stack
- FortiGate, Azure, Cisco IronPort, Nessus, ITIL
About
IAM engineer focused on enterprise identity security and integration
I work with companies that need fast integration, reduced identity risk, stable access control, and scalable IAM architecture. I specialise in understanding existing enterprise systems quickly and improving them without disruption.
I ship production work with proper version control (Git). I use LLMs locally and in controlled workflows to accelerate script development and logic review — always with human oversight and no client data exposure — so engineering time stays focused on architecture and risk decisions, not typing.
- Security architecture
- Identity governance
- System integration
- Practical engineering delivery
- Agile & change management
- Git-based delivery
- AI-assisted engineering
Credentials
- CISSP
- Certified Netwrix Usercube Professional Services Engineer
- SC-300 Microsoft Identity and Access Administrator
- AZ-700 Designing and Implementing Microsoft Azure Networking Solutions
- ITIL 4 Foundation
Owner of a production Usercube IGA platform supporting a major European aviation organisation. CISSP-certified, with Capgemini cybersecurity delivery experience, ITIL-aligned enterprise operations, and hands-on Scrum, agile, and change management practice.
Leadership & enablement
- Structured onboarding paths and hands-on exercises for IAM engineers ramping up on Usercube
- Demo and training environments that let teams test configurations and troubleshoot with realistic data
- Knowledge transfer covering IGA operations, tooling, and best practices for consistent delivery
Vendor & community engagement
- Track Usercube roadmap updates and release planning to keep internal teams ahead of platform changes
- Submit enhancement proposals directly to the vendor based on production and integration experience
- Coordinate training sessions, partner portal access, and summit attendance with product owners and channel managers
Agile & change delivery
- Work in Scrum and agile cadences with product owners, engineers, and stakeholders on identity platform changes
- Plan and land IAM improvements with sensible release sequencing, rollback thinking, and clear communication
- Support change management so teams adopt new access workflows, tooling, and processes without disruption
Let's work together
Available for enterprise IGA contracts
If you need someone to own, stabilize, or improve your IGA platform — not just advise on it — I am available for freelance and contract work across the EU with 7 weeks' notice.
Brussels | EU Remote