All servicesConsulting services

Identity & infrastructure security

I help teams replace informal access arrangements with named owners, individual accounts and permissions they can explain and maintain.

What I can take on

Understand existing access

Review permissions with system owners and team leads. Check how people and automations use them before making changes that could interrupt work.

Ownership and requests

Connect systems to their owners and give access requests a documented approval process. Link the request and implementation to the relevant asset.

Accounts and permissions

Configure directory groups and access across systems and Kubernetes. Replace shared access with individual identities, and give automation dedicated accounts with the permissions it needs.

Boundaries and audit records

Define network separation and the connections each environment needs. Set up relevant activity logs and alerts, keeping requests, approvals and technical permissions traceable.

Typical deliverables

  • A record of system owners and an access request process
  • Configured accounts, groups, permissions and network rules
  • Audit logging and documentation connecting approved access to its implementation

Understand the dependencies before removing access

An old account may still run a deployment or scheduled task. Access changes need input from the people responsible for those systems. Reviewing the dependencies makes it possible to reduce permissions while planning for the work that relies on them.

Related technical experience
From previous work

How this looks in practice.

Have a similar situation?

Tell me what you have and what you want to change.

Get in touch