Hi, I'm Ricky 👋
Technical Leader & Digital Transformation
About
I'm a technical leader and engineer with over a decade of experience driving digital transformation across complex, large-scale enterprises. I specialize in Identity and Access Management (IAM), Zero Trust architecture, and cloud security — and I'm as comfortable writing code and reviewing architecture as I am negotiating a vendor contract or briefing an executive stakeholder. I lead cross-functional teams that ship secure, scalable solutions to real problems.
Currently, I lead engineering and technical strategy for a large-scale enterprise identity and access management platform, with a focus on Zero Trust architecture, privileged access management, and security compliance — including federal and industry security compliance frameworks. I manage cross-functional teams of engineers and contractors, and regularly step outside pure engineering to handle vendor negotiations, budget planning, and executive communication — the parts of the job that don't show up in a tech stack but make or break delivery.
Before moving into technology, I spent a decade as a Registered Nurse in the UK's National Health Service, working under pressure across intensive care and multidisciplinary clinical teams in fast-changing environments. That experience shaped the leadership style I bring to engineering today: clarity, empathy, and accountability, with the attention to detail that keeps complex systems — and the people who depend on them — running safely.
I'm also a former editor of the W3C Solid-OIDC specification and have contributed to open-source IAM and DevSecOps tooling, including authoring tutorials for Real Python. I'm always interested in conversations about engineering leadership, identity security, and building teams that deliver.
Experience
Privileged Access Management
Led PAM strategy and implementation across multiple platforms — including CyberArk, Delinea Secret Server, Keeper Security, and BeyondTrust. Standardized privileged credential management across enterprise environments and aligned PAM programs with Zero Trust security principles.
Zero Trust Architecture
Shaped and executed Zero Trust strategy across identity and access systems, translating policy frameworks into technical implementation and measurable security improvements.
IAM Product & Team Leadership
Led engineering and operations for a suite of open-source IAM and DevSecOps products at an identity-focused consultancy. Managed hiring, performance reviews, and separation decisions — building and sustaining high-performing teams from the ground up.
DevSecOps & CI/CD Pipelines
Designed and implemented CI/CD pipelines integrating security tooling into development workflows, accelerating delivery while maintaining compliance and code quality.
Security Compliance & Audit Readiness
Led security compliance and audit-readiness initiatives grounded in federal and industry security compliance frameworks, driving measurable reductions in vulnerability findings while maintaining continuous compliance across enterprise systems.
Cross-Functional Program & Vendor Leadership
Partnered with vendors, finance, and executive stakeholders to align technical roadmaps with organizational priorities — from contract negotiations and budget planning to executive-level reporting on risk and program status.
Publications & Standards
W3C Solid-OIDC Specification
Former Editor
A decentralized authentication protocol built on OpenID Connect for the Solid ecosystem.
View the spec →Build a Content Aggregator in Python
Author · Real Python
A project-based tutorial covering RSS feed parsing, Django custom management commands, and automated task scheduling to build a fully functioning content aggregator.
Read the article →Ruff: A Modern Python Linter for Error-Free and Maintainable Code
Author · Real Python
An introduction to Ruff, an extremely fast Python linter and formatter, covering installation, error checking, auto-fixing, and configuration.
Read the article →Continuous Integration and Deployment for Python With GitHub Actions
Author · Real Python
A comprehensive guide to building CI/CD pipelines for Python projects using GitHub Actions, covering linting, testing, PyPI deployment, and automated dependency updates.
Read the article →Let’s talk.
I enjoy connecting with others who are working on interesting problems in engineering leadership, identity security, and digital transformation. Whether you’d like to exchange ideas or explore opportunities, I’d welcome hearing from you.
Get in Touch →