Isaac Kolensie is a Cybersecurity Architect specializing in Identity and Access Management, Zero Trust architecture, and Identity Governance. With 15 years of enterprise experience across financial services, healthcare, and higher education, he brings both strategic vision and hands-on technical depth to every engagement.
He designs cloud-native identity architectures across hybrid and multi-cloud environments and builds governance programs that satisfy audit and compliance requirements. His current architecture research and curriculum work extends Zero Trust and least-privilege thinking into Non-Human Identity and AI workloads — where most organizations are still catching up.
Beyond architecture, Isaac teaches. He designs and delivers enterprise security architecture programs that build lasting practitioner-level capability inside organizations — not just certification checkboxes.
An original 14-week instructor-led enterprise security architecture program, purpose-built to close the gap between certification preparation and practitioner-level competency.
A single regulated-sector scenario runs end to end across all fourteen weeks. Gaps surfaced early are carried forward to be quantified, governed, and remediated later — so participants build one architecture instead of sampling disconnected topics. Every week produces a graded architecture artifact, and the program closes with a design defended under questioning.
Available as the full cohort program, as one- to three-day modular workshops, as corporate onsite or remote delivery scoped to your own sector and control environment, or as one-to-one coaching.
Two hours per week over fourteen weeks, instructor-led, with a graded architecture artifact at the end of every module.
The program moves from security principles and architecture frameworks into quantitative risk and AI governance, then through resilience and recovery, identity, network and cloud architecture, application and data security, and cloud-native and AI infrastructure security.
It closes with a capstone: a complete enterprise architecture presented and defended under questioning, scored on trade-off reasoning.
Detailed lesson plans, scenario materials, and weekly deliverables are shared with enrolled cohorts and with organizations under a scoped engagement.
Foundational cybersecurity lessons, published free. The current series, The Foundations of Modern Cryptography, explains the machinery most security courses assume you already know — authentication tokens, public and private keys, digital signatures, Diffie-Hellman, hashing, certificate authorities and the chain of trust, and how TLS and HTTPS actually work.
Each episode is built around a plain-language storyline rather than notation, so the concept lands before the mathematics does. New episodes are in production.
Designing identity programs, Zero Trust architectures, and governance frameworks for organizations operating at scale across hybrid and multi-cloud environments. Every engagement is hands-on, practitioner-led, and built around your specific environment — not a generic playbook.
Focused engagements across training, identity, access, and governance — delivered by a practitioner who has designed and operated these systems at enterprise scale.
Team enablement built on the 14-week program and rescoped to your sector, platforms, and control environment. Delivered as a full cohort, as focused multi-day workshops, or as an ongoing capability track. Suited to security engineers moving into architecture, IAM teams needing governance depth, and GRC staff needing technical grounding.
One-to-one architecture mentoring for practitioners preparing for architect-level roles or certifications. Focused on the reasoning that exams and design reviews actually test — trade-off justification, control selection under constraint, and defending a design under questioning.
Designing identity programs and Zero Trust frameworks that scale — aligned to your business, your cloud environment, and your risk profile. Federation and token design across SAML, OAuth 2.0, and OIDC; SCIM lifecycle automation; RBAC and ABAC models; and privileged access and PIM control design.
Building governance programs that enforce least-privilege, automate the identity lifecycle, and give you the audit trail your compliance team needs — without creating friction for the business. Includes access recertification design, privilege creep remediation, and standards and SOP authorship.
An honest evaluation of where your identity and Zero Trust program stands today, where the gaps are, and what to fix first. Assessed against NIST CSF, NIST SP 800-207, and your own regulatory obligations. Delivered as a prioritized roadmap, not a generic report.
Establishing governance for AI systems before they outrun your control environment. Risk identification against current AI risk management frameworks, mapped to the certifiable AI management-system standard and the regulatory obligations that already apply to you — plus where AI agents and their non-human identities actually run in your infrastructure.