At HSBC, I’m a Security Solution Architect on the strategic Identity and Access Management programme, working on the Privileged Access Management pillar. I own end-to-end solution design for platform components and integrations, including credential vaulting, privileged session management and secrets management.
I’ve applied risk-driven, SABSA-aligned architecture across regulated banking, energy and technology environments. At Systal Technology Solutions, I led security architecture for Scottish Power’s OT and IT projects and carried the Renewables PAM bid into delivery, authoring its low-level design, workflows and test traceability.
At DWP, I delivered assurance for CrowdStrike Falcon Cloud Security across AWS and Azure and provided API security architecture for digital services. My work included threat modelling microservice APIs and defining controls against risks such as broken authentication and excessive data exposure.
Across roles at HSBC, Thomson Reuters/Refinitiv, Shawbrook Bank and Lloyds Banking Group, I’ve worked on IAM and PAM, cloud security, API security and secure AI design. I hold CISSP, CCSP, CCSK, CISM and TOGAF 9 certifications.

