Taking select engagements

Nick Slabaugh

IAM Consultant: Identity for People and AI Agents

I help CISOs who need outside support on strategic assessment and planning make confident moves to expand their identity programs across people, process, and technology.

Four Practice Areas

Focused engagements built on thirteen years of hands-on IAM work, each ending in a concrete deliverable.

IAM Strategy Assessment

A program-level review of your identity posture across identity governance (IGA), privileged access (PAM), and customer identity (CIAM). You get a clear view of where the program stands, where the real gaps are, and a prioritized set of recommendations. My deepest offering, built on assessments I led at Edgile and IDMWORKS for clients including AT&T, Chick-fil-A, Crate & Barrel, and Vanderbilt University.

Duration
8–12 weeks
Deliverables
  • Current-state assessment
  • Future-state design
  • Plan of action
  • Roadmap
IGAPAMCIAMAccess Governance

Product Selection Support

A vendor-neutral platform evaluation from someone who has implemented the leading IGA and PAM platforms. I build the requirements, demo scenarios, and scoring, so the recommendation reflects how each tool behaves in production rather than in a sales demo.

Duration
Up to 12 weeks
Deliverables
  • Evaluation scorecard
  • Evaluation document
  • Live support for discovery, scorecarding, and decision sessions
SailPointCyberArkPing IdentitySaviyntOkta

Roadmapping Support

For teams that already know their gaps and need the work put in order. I sequence it by technical dependencies, resource constraints, and risk. Both assessments include a roadmap; choose this when the assessment work is already done.

Duration
Scoped to your needs
Deliverables
  • Sequenced IAM roadmap
IGA RoadmapPAM RoadmapSequencing

AI Identity & Access Controls

AI agents and tools are being granted access faster than identity controls adapt. This review covers how your agents and other non-human identities authenticate, what they can reach, who owns them, and which controls need to change, applying the governance, privileged access, and Zero Trust principles behind mature IAM programs.

Duration
8 weeks
Deliverables
  • Current-state assessment
  • Future-state design
  • Plan of action
  • Roadmap
AI AgentsNon-Human IdentityAccess ScopingZero Trust

Experience and Expertise

13+ Years in IAM
$3M+ New-client sales from paid advisory
100+ Apps onboarded to SailPoint, per client
12+ Industries served
See the full résumé: career timeline, roles, and selected clients

About

I've spent my career building and assessing identity and access programs, most recently as a senior director at IDMWORKS and before that rising from consultant to director at Edgile. Through those firms I delivered work for AT&T, Chick-fil-A, Crate & Barrel, and Vanderbilt University.

My technical depth is in SailPoint IdentityIQ, Microsoft Entra ID, and CyberArk, with implementation experience in each, including an Entra ID migration at AT&T scale. For selection projects, I evaluate the wider IAM platform landscape.

I work best in small sessions and hands-on collaboration, not advisory at a distance. If you need someone who gets into the actual system and tells you what needs to change and in what order, that is where I am most useful.

I currently hold a contract role with KeyData Cyber and take on Common Ground engagements alongside it as capacity allows.

Platform and Technical Background

Core Technical Depth Deep hands-on implementation experience

SailPoint IdentityIQMicrosoft Entra IDCyberArk

IAM Tooling Landscape Evaluation and selection experience

SaviyntSailPoint Identity Security CloudPing IdentityOktaBeyondTrust

Practice Areas

IGAPAMCIAMZero TrustAI & Non-Human Identity

Standards and Protocols

SAML 2.0OIDC / OAuth 2.0SCIMRBAC / ABAC

Start a Conversation

Whether you have an active program or are just starting to think through your options, I am happy to talk through what you are facing.

  • IAM Strategy Assessment
  • Product Selection Support
  • Roadmapping Support
  • AI Identity & Access Controls

Reply time: I respond within one business day.

First conversation: a short call about your environment and what is prompting the work. You will leave with a sense of whether an engagement makes sense and what it would cover. No preparation needed.

Fields marked are required.