Identity & Access Management (IAM)
Authentication, federation, single sign-on, provisioning and lifecycle automation across Okta, Microsoft Entra ID, Ping Identity and ForgeRock.
OktaEntra IDPingForgeRock
PRACTICE DOMAINS
Five practices. One discipline: controlling who can do what, and proving it.
Identity, privilege, governance, detection and adversary simulation. Each practice carries its own certified bench, its own screening lab and its own practice head who has delivered the work in production.
5
Core practices
30+
Platforms covered
100%
Certified bench
48h
Profile SLA
HOW WE ORGANISE THE BENCH
One dedicated practice per domain, not one generalist pool
IAM, PAM, IGA, SOC and offensive security are staffed as five distinct practices, each with its own bench, its own certifications and its own practice lead — so a requisition for a PAM architect is never filled with a generalist IAM hire.
FIVE PRACTICES
WHERE WE GO DEEP
Practice domains and covered platforms
Privileged Access Management (PAM)
Vaulting, session isolation, credential rotation, just-in-time elevation and endpoint privilege control across CyberArk, Delinea, BeyondTrust and HashiCorp Vault.
CyberArkDelineaBeyondTrustVault
Identity Governance & Administration (IGA)
Role modelling, access certification, segregation of duties enforcement and compliance evidence across SailPoint and Saviynt.
SailPoint IIQIdentityNowSaviynt
Security Operations Centre (SOC)
Monitoring, triage, detection engineering, threat hunting and incident response across Microsoft Sentinel, Splunk ES, CrowdStrike and SentinelOne.
SentinelSplunk ESCrowdStrikeSOAR
Ethical Hacking / Offensive Security
Penetration testing, red teaming, adversary emulation and purple team exercises mapped to MITRE ATT&CK with remediation validation.
VAPTRed teamOSCPMITRE
Cloud Security & DevSecOps
Posture management, entitlement right-sizing, pipeline gating and container hardening across AWS, Azure, GCP, Wiz and Prisma Cloud.
CSPMCIEMTerraformKubernetes
PLATFORM COVERAGE
Certified depth by platform
Bench counts are indicative and refreshed monthly. Ask for the current availability matrix.
| Platform | Practice | Certified engineers | Typical roles |
|---|---|---|---|
| CyberArk PAS / EPM | PAM | Sentry and CDE credentialed | Architect, implementation engineer, operations lead |
| Okta Workforce and CIAM | IAM | Certified professional and consultant | Architect, integration engineer, administrator |
| Microsoft Entra ID | IAM | SC-300 and SC-100 holders | Architect, engineer, conditional access specialist |
| SailPoint IIQ / IdentityNow | IGA | Certified engineers and developers | Developer, role analyst, campaign operations |
| Saviynt EIC | IGA | Platform certified | Developer, analytics specialist, administrator |
| Microsoft Sentinel | SOC | SC-200 holders | Detection engineer, L2/L3 analyst, content developer |
| Splunk Enterprise Security | SOC | Splunk certified | ES administrator, use-case developer, analyst |
| Offensive tooling | Ethical hacking | OSCP and equivalent | Penetration tester, red team operator |
RAPID TALENT MOBILISATION
Need depth in a platform not listed here?
Tell us the stack. If we cannot staff it credibly, we will say so rather than send an approximate match.