About Jamal

Jamal Jones

Protect what matters
Efficiently · securely · automatically

Fifteen years inside the machinery of enterprise access, from IAM operations to owning the program. I build the systems that take the manual work out of identity, and I write about identity as the business runs it.

Portrait of Jamal Jones
15years in enterprise identity
4enterprises: Koch, GuideWell, Deloitte, and one in hospitality
500K+users on the Deloitte identity program I helped run
87%faster time-to-insight from the analytics platform I built

Now

What I'm doing this year.

Day jobLeading the IAM program for a resort and vacation-ownership companyWithin Cybersecurity & GRC since 2025: governance, lifecycle automation and security posture.
BuildingThe Identity LabA free skills framework for identity: 13 domains, 58 capabilities, and the tools to measure a person, a team and a program against it.Visit the LabWritingInsights9 essays on identity as a business enabler.Read the essays

The pattern

Identity programs drown in manual work, and the drowning is treated as normal.

I started in IAM operations at Koch Industries, owned governance and privileged access at GuideWell, and spent seven years in Deloitte's Office of Identity leading a transformation, engagement and analytics team.

Everywhere I saw the same thing: reporting, certifications, onboarding and evidence done by hand. So I decided to build the systems that end it. At Deloitte that meant an identity analytics platform. Today it means AI agents handling assessment, analytics and orchestration end to end.

The throughline: security programs should produce value-added outcomes, not just controls, and the best ones are increasingly software.

Career

Fifteen years, four enterprises.

  1. 2025 — nowIAM Program Owner, Cybersecurity & GRCResort & HospitalityFull ownership of the enterprise IAM program: governance, lifecycle automation, and security posture.
  2. 2018 — 2025Business Engagement Manager, Office of IdentityDeloitteLed a transformation and engineering team for a program supporting 500K+ users. Built Deloitte's first internal IAM analytics platform.
  3. 2016 — 2018Sr. IAM Engineer, IGA & PAMGuideWell SourceOwned identity governance and administration and privileged access: certification, entitlements, privileged credentials.
  4. 2013 — 2016IAM Operations EngineerKoch IndustriesSubject matter expert for onboarding and separations: identity lifecycle operations and provisioning across a global enterprise.

2025 — · AlongsideFounder, Strategy & AI Engineering · The NOVA Group / Kinara Labs. Multi-agent orchestration, AI assessment engines and automation platforms. The work is under Projects.

What I'm good at

Identity & securityRunning identity as a program: governance, lifecycle and privileged access, end to end.IAM strategy & governance · IGA · PAM · SSO / federation (SAML, OIDC) · CIAM · access certification · compliance automation · GRC
AI & automationTaking the manual work out of identity, with agents and workflows that run on their own.Multi-agent orchestration · Claude / GPT / Gemini · Vertex AI · n8n workflows · AI assessment engines · prompt engineering
EngineeringBuilding the tools, not just specifying them: analytics platforms and assessment engines.Next.js · TypeScript · Python · Power BI · Azure · Supabase · GCS · REST APIs · webhook architecture
LeadershipLeading transformation teams, and the stakeholders around them, through change.Program ownership · transformation management · process engineering · stakeholder engagement · team leadership · strategic advisory

More of the work

Everything that isn't the identity practice itself: seven projects, the 52 tools behind them, and Off the Clock.