About Kevin Armstrong
IT shouldn't cost more every year. Kevin Armstrong is a security leader who treats identity programs as capital assets, not recurring expenses. With 20+ years in enterprise security, his focus is simple: reduce execution risk, improve margin discipline, and make identity measurable.
His work spans Microsoft Entra, Okta, Ping Identity, and SailPoint, with large-scale delivery including a 10,000+ user multi-domain consolidation and standing-privilege reduction across complex hybrid environments. He leads with an engineering-first approach and strong business alignment.
What I Do
For PE, Portfolio Companies & Executive Engagements
- Post-Acquisition Identity Risk Review: Rapid assessment of identity sprawl, privileged access exposure, and integration risk across merged environments.
- Fractional CISO / Director Advisory: Board-ready governance, security strategy, and operating-model design without full-time overhead.
For Enterprise Security & Identity Programs
- Identity Program Leadership: Entra ID, Okta, Ping Identity, and SailPoint strategy, governance, and operational ownership.
- Zero Trust & Privileged Access: Conditional access, PIM/JIT, and standing privilege reduction across workforce and customer environments.
- Compliance Evidence Delivery: Access certification, SoD, entitlement governance, and audit-ready control evidence for ISO 27001, SOC 2, and NIST-aligned programs.
Where I've Been
At GCA Technology Services, I led multi-platform identity modernization across Microsoft Entra, Okta, Ping Identity, and SailPoint, unifying workforce and customer identity strategy while reducing long-term platform risk and ownership cost.
At Liberty Latin America, I executed a high-risk M&A infrastructure consolidation, merging multiple Active Directory domains and deploying Zero Trust controls that materially reduced privileged access exposure across a large, distributed enterprise spanning multiple countries.
The thread through all of it: identity is the control plane. Get it right, and security, compliance, and cost follow. Get it wrong, and everything downstream becomes expensive.
Credentials
Active: CISSP | Microsoft Cybersecurity Architect Expert (SC-100) | Azure Security Engineer (AZ-500) | Azure Solutions Architect Expert | Okta Consultant
In Progress: ISACA CRISC (Target Q3 2026) | FinOps Certified Practitioner (Target 2026)
Education
Bachelor of Science, Network and System Administration
Western Governors University
Business Foundations
Wharton Executive Education
Want to talk about your identity program?
Let's connect →