Kevin Armstrong

Capital Efficiency | Security Strategy | Identity Architecture

Strategic Value Proposition

Fractional CISO and Director of Security with 20+ years converting identity sprawl into consolidated, revenue-protecting assets. I don't just architect systems—I warrant the outcome. From post-M&A domain merges to Zero Trust programs that cut privileged access by 40%, my work sits at the intersection of risk ownership and P&L impact.

Core Competencies & Frameworks

Capital Efficiency & Risk

  • Total Cost of Ownership (TCO) Reduction
  • Operational Risk Mitigation & Governance
  • P&L Optimization & Margin Analysis
  • Human Capital ROI (Team Throughput)

Strategic Architecture

  • Identity Strategy as Risk Hedge (Zero Trust)
  • Post-M&A Infrastructure Consolidation
  • Cloud FinOps & Asset Liquidation
  • Enterprise Logic & Process Automation

Technical Ecosystems

  • Identity & Access: Microsoft Entra (Hybrid/Cloud), Ping Identity, Okta, CIAM/B2C
  • Cloud & Automation: Azure Networking, Azure Arc, DevOps, Infrastructure-as-Code
  • Data & Modern Work: Microsoft Fabric, Power BI, Microsoft 365 (Intune/Teams)
Professional Experience
Director of Professional Services | GCA Technology Services
May 2021 – Present
  • Business Model Pivot (NRE to ARR): Engineered a strategic transition from volatile project-based consulting (NRE) to high-margin "Managed Identity" subscriptions (ARR), creating a scalable, recurring asset class within the services portfolio.
  • Strategic Identity Architecture (IAM & CIAM): Directed a holistic identity modernization portfolio leveraging Auth0, Okta, Ping Identity, and Microsoft Entra. Unified Customer and Workforce strategies to liquidate redundant legacy assets (e.g., Okta-to-Entra migrations) while designing vendor-neutral CIAM patterns that prevented lock-in and reduced long-term TCO.
  • Identity Orchestration & Fraud Defense: Architected adaptive access journeys for a National Retail Enterprise using Ping DaVinci, successfully mitigating high-velocity New Account Fraud (NAF) and Account Takeover (ATO) attacks to protect e-commerce revenue streams.
  • Human Capital & Margin Optimization: Maximized engineering ROI by deploying the "Engineering Growth Model," a performance framework that optimized consultant throughput and minimized burnout risk by gamifying the acquisition of high-value technical competencies.
  • AI Enablement: Operationalized Generative AI adoption by architecting a centralized prompt library and Copilot agents, reducing the cognitive load on senior staff and accelerating time-to-value for routine operations.
Enterprise Technology Supervisor | Liberty Latin America
Aug 2019 – Apr 2021
  • M&A Infrastructure Consolidation: Executed a high-risk technical merger of 5 Active Directory domains (10,000+ users), permanently lowering TCO by liquidating redundant infrastructure assets and unifying the identity control plane.
  • Zero Trust Implementation: Deployed Zero Trust architecture as a primary hedge against data breach liability, systematically reducing the attack surface by eliminating 40% of standing privileged access accounts.
  • Operational Efficiency: Automated labor-intensive workflows to increase engineering throughput by 15%, successfully avoiding the OpEx requirement for additional support headcount.
Senior Systems Engineer | Cable & Wireless Communications
Apr 2017 – Aug 2019
  • Process Automation: Developed automated provisioning logic to bridge gaps between HR and IT systems, reducing operational friction and data latency.
  • Endpoint Security Strategy: Strengthened the organizational security posture by deploying AppLocker and LAPS, mitigating the risk of lateral movement across the enterprise fleet.
Senior Systems Engineer | TaxSlayer, LLC
Mar 2015 – Feb 2017
  • Revenue Continuity: Secured availability for high-velocity transactional systems during peak fiscal periods, effectively eliminating downtime-induced liquidity risks.
  • Storage Architecture: Managed the migration of critical data assets to high-performance SAN architecture to support transaction volume scaling.
Prior Operations Experience (2002–2015): Progressive engineering roles establishing foundational expertise in Enterprise Systems, Virtualization, and Technical Consulting (including contracts with ManPower & Quanexus).
Certifications & Credentials
  • Strategic Credentials: CISSP | Microsoft Cybersecurity Architect Expert (SC-100)
  • Governance & Risk: ISACA CRISC (Candidate - Target Q3 2026) | FinOps Certified Practitioner (Candidate - Target 2026)
  • Platform & Technical Depth: Azure Security Engineer (AZ-500) | Fabric Analytics Engineer (DP-600) | Identity & Access Admin (SC-300) | Okta Consultant
  • Architecture & Automation: Microsoft DevOps Engineer Expert | Azure Solutions Architect Expert
Education

Bachelor of Science, Network and System Administration
Western Governors University | Salt Lake City, UT
Focus: Enterprise Systems Architecture & Operations

Business Foundations
Wharton Executive Education