IGA and PAM architecture
Architecture, modelling and governance guidance for identity lifecycles, roles, access certification and privileged access.
Independent identity security expertise
Identity architecture built on deep experience.
Senior advisory, architecture and troubleshooting for complex identity governance, privileged access, directory and integration environments.
Open for engagements from October 2026
What I do
Practical guidance for demanding identity environments
Wolfhagen Identity Consult ApS helps organizations understand, improve and operate identity governance solutions, from architecture and integration to observability and critical problem resolution.
Directory and integration architecture
Enterprise LDAP design, directory architecture, identity feeds, synchronization, provisioning and application onboarding.
Secrets and privileged identities
Advisory and integration guidance for privileged identities, credentials, application secrets and machine identities.
Troubleshooting and observability
Root-cause analysis, remote debugging, operational insight and maintainable engineering for complex identity infrastructures.
Experience
More than four decades of enterprise technology experience
Franz Wolfhagen brings more than 25 years of specialized Identity and Access Management experience across architecture, modelling, implementation, integration and troubleshooting.
As a former IBM Worldwide Subject Matter Expert, Franz has supported complex customer environments, high-impact technical situations and enterprise identity transformations.
Identity governance architecture
Identity lifecycle architecture, role governance, access certification, provisioning models and application onboarding.
Privileged access and secrets
PAM architecture, privileged identity governance, credential and secrets management, and machine identities.
Directory and LDAP architecture
Enterprise LDAP architecture, schema, replication, availability, performance and resilience.
Identity integrations
Identity feeds, HR-driven lifecycles, synchronization, provisioning connectors and SAP patterns.
Observability and troubleshooting
Root-cause analysis, remote Java debugging, incident resolution and operational insight.
Advisory and modernization
Architecture reviews, design validation, migration planning, mentoring and modernization.
- Governance
- IBM Verify Identity Governance, ISIG and ISIM
- Privileged access
- IBM Verify Privileged Identity
- Secrets
- HashiCorp Vault, L4 certified
- Integration
- IBM Verify Directory Integrator, SDI/TDI
- Directory
- IBM Verify Directory Server
- Architecture
- IGA, PAM, LDAP, provisioning and integration
- Operations
- Observability, debugging and critical situations
- Availability
- Open for engagements from October 2026
AI & Agentic Engineering
Applying AI to real engineering problems, with architecture and human control intact.
AI-assisted engineering is most valuable when it goes beyond code generation. I use agentic AI for understanding existing systems, analysing requirements and architecture, planning changes, implementing and reviewing code, troubleshooting complex problems, documenting decisions and validating results.
Governed AI-assisted development
My practical work includes extensive use of IBM Bob as an AI development partner, complemented by Microsoft Copilot as an independent reviewer. The approach emphasizes repository-grounded analysis, requirements traceability, explicit approval gates, source verification and recorded build and test evidence.
The objective is not autonomous code generation. It is faster engineering with stronger context, review and evidence.
AI provides acceleration. Architecture, evidence and human accountability provide control.
IBM BobMicrosoft CopilotAgentic workflowsHuman-in-the-loop governance
Insights
Identity and architecture insights
Independent analysis of identity security, agentic AI, software architecture and operating complex enterprise platforms.
New · Agentic identity
AI Agents in IAM: The Same Security Principles at Machine Speed
AI agents change how organizations delegate work and authority. This article introduces purpose-bound agent authority, least agency, closed-loop provenance and a governed IAM Agent architecture that separates reasoning, policy, execution and verification.
Coauthored with Dik Tuijl
Read the articleSoftware architecture
The Value and Danger of Use Cases in Software Design
Use cases are valuable for scope, requirements and testing, but become dangerous when treated as implementation instructions without the architectural modelling needed to keep the solution coherent.
Read the articleContact