I'm Billy Carrie, a Founding M&A Security Engineer focused on building and enhancing cybersecurity programs across 10+ acquired organizations in the Retail and Ecommerce industry. When you're securing a portfolio of companies with varying identity maturities, you learn fast that identity is the perimeter.

My work spans IAM, Zero Trust architecture, Azure and multi-cloud security, and the risk and compliance frameworks that give our identity program a strong foundation to build on.

Most organizations have identity tools. Few have identity programs.

The difference comes down to three things I focus on in every engagement:

1. Governance before automation — Automating a broken process creates automated chaos. I design the policy and ownership model first, then automate it.

2. Non-human identity parity — Service accounts, service principals, and managed identities carry the same risk as human accounts but receive a fraction of the governance attention. Closing that gap is often where the biggest risk reduction lives.

3. Metrics that move conversations — IAM teams that speak in technical terms stay technical. I build reporting frameworks that translate identity posture into business risk — which is how you get budget, headcount, and executive support.