About Diego
Senior IAM Architect | CISSP | ForgeRock (Ping Identity), Okta & IBM | Lifecycle & Migration Lead | Sales advisory
CISSP professional specialized in Identity and Access Management With over 20+ years of experience across three continents—including 12 years at Liberty Global and roles at PwC and Simeio. I bridge the gap between high-level architectural design and complex enterprise integration. Having spent my career as both an Architect and a Lead Integrator, I specialize in ensuring that IAM strategies are not just visionary, but technically sound and deployable.
Senior Access Management (AM) Architect and CISSP professional with a strong foundation in cybersecurity and network infrastructure defense. Specialist in the strategic design and secure integration of enterprise identity solutions using ForgeRock, Ping Identity, and Okta. Expert in mitigating identity-based risks by bridging complex application ecosystems with centralized authentication, advanced federation, and robust directory services.
English
Native or bilingual
Spanish
Native or bilingual
Remote only
Primarily works remotely
Experience
- Simeio SolutionsSenior Identity ArchitectDIGITAL AND ITSeptember 2019 - June 2025 (5 years and 9 months)Toronto, ON, Canada
- Served as the Lead Architect supporting an IAM ecosystem for eHealth Ontario, governing access for 1,500+ applications and critical provincial services, including organ donor transplants and clinical systems where 100% uptime is mission-critical.
- Led the high-stakes ForgeRock Data Center migration for Ontario eHealth, ensuring continuous availability for critical public health services, reducing hosting costs significantly.
- Led the architectural design and execution of a critical ForgeRock upgrade (v6.5 to v7.5) for Ontario eHealth; successfully resolved complex dependencies and migrated core functionality to replace deprecated features without service interruption.
- Orchestrated the seamless migration from on-premises infrastructure to ForgeRock Identity Cloud for Coast Capital Savings, enhancing organizational agility and modernizing the security posture.
- Served as the Technical Lead for requirement gathering, architectural design, and end-to-end delivery of OIDC/SAML integrations.
- Effort estimations for enterprise IAM bids.
- Design and delivery of OIDC, OAuth 2.0 and SAML integrations using ForgeRock.
- Delivery of highly customized OAuth 2.0/OIDC tokens using different grants.
- Developed and validated complex Proof of Concepts (PoCs) to prove the technical feasibility of IAM bids, reducing project risk and securing stakeholder buy-in.
- Decipher WorksSenior Security ConsultantDIGITAL AND ITOctober 2017 - May 2019 (1 year and 7 months)Melbourne VIC, Australia
- IDAM and security client-facing consultant for an Australian Bank - * Integration of ForgeRock suite for internals and customers IDAM architectures.
- Deployment and enhancement of ForgeRock stack (AM, IG, DS).
- Support of ForgeRock, IBM SAM and OKTA.
- OKTA application integrator for the client.
- Engaged with PAM technologies (CyberArk, Thycotic) and ID Governance (SailPoint).
- Skilled with B2E IAM architectures: Windows Server and AD.
- Internal auditor for ISO 27001 - Information Security Management for Decipher Works.
- Commercial proposals: Request for Information, Request for Tender.
- Liberty Global Operations B.V.Technical Solution Manager – Identity & Access ManagementDIGITAL AND ITFebruary 2015 - June 2016 (1 year and 4 months)Amsterdam, Netherlands
- Develop the Identity and Access Management competence centre, based on a distributed onshore and offshore team working with different vendors and consultants.
- Technical lead designer for new Identity and Access Management architecture, deployed across several European countries.
- Integration and migration of European country specific websites to global Pan-European architecture and platform.
- Provide new services for Identity and Access Management architecture: web, federations, mobile apps, web-services, Wi-Fi roaming.
- Scale horizontally and vertically LDAP user repository to handle new services, traffic and a population increase by 500%.
- Reduced project delivery timelines by up to 50% by using the same framework and tools.
Recommendations
Be the first to recommend Diego
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- IT Engineer (equivalent to Bachelor and Master)University of Zaragoza1999IT Engineer (equivalent to Bachelor and Master)
- CISSP®2017CISSP®
Certifications
- Certified Professional - PingOne Advanced Identity Cloud (FRX-IC-CPE)Ping Identity2023