10/01/2026 updated
100 % available
Identity and Access Management Expert | Cloud Security Architect
Tivoli, Italy
Only remote
Field IT EngineerAbout me
My name is Matteo Creati, and I am an Identity & Cloud Security Architect with over twenty years of experience supporting enterprise organizations in modernizing and securing their cloud environments.
Amazon Web ServicesAuthentication ProtocolsMicrosoft AzureCloud Computing SecurityMulti-Factor AuthenticationGovernanceHealth Insurance Portability and Accountability Act (HIPAA) ComplianceIdentity ManagementIncident ManagementEnterprise ArchitectureInfrastructure ManagementKerberos (Protocol)Network SecurityNT LAN ManagerOAuth
Identity and Access Management
Advanced expertise in Microsoft Identity solutions, Azure Active Directory, and Zero Trust Framework implementation with 20 years of experience
Cloud Security Architecture
Comprehensive knowledge in Azure Cloud Solution Architecture, Microsoft 365 security solutions, and cloud service modernization
Authentication Protocols
Deep technical skills in Kerberos, NTLM, OIDC, OAuth2, and multi-factor authentication implementations
Microsoft Azure Services
Extensive experience with Azure infrastructure, GCP, AWS, and cloud migration strategies
Identity Governance & Administration (IGA): Entra ID Governance, entitlement management, access packages, lifecycle workflows (JML), access certification campaigns and SoD conflict management, with compliance reporting on Entra and Microsoft Sentinel. Tenant Consolidation & Migration: Entra-to-Entra tenant consolidation across multiple business entities and European countries; Managed Tenancy Operations (MTO) and cross-tenant administration; SailPoint-to-Entra migration of 6,000 identities using SCIM 2.0; legacy STS and ADFS modernisation. Privileged & Conditional Access: Conditional Access policy design, Privileged Identity Management (PIM), just-in-time access, privileged access workstations, passwordless and modern authentication, B2B and external collaboration governance.
Cybersecurity Solutions
Expertise in Microsoft Defender, Sentinel, threat intelligence, and security incident management
Network Security
Advanced knowledge of PKI infrastructure, TLS, firewall configuration, and network security protocols
Compliance and Governance
Experience with SOX, HIPAA, GDPR compliance frameworks and identity governance structures
Enterprise Architecture
Skills in STRIDE Model, reference architecture design, and enterprise-level system integration
Experience
Professional experience10+ years
Freelancer since2026
Languages
EnglishFluentItalianNative speaker
Project history
Identity architecture engagements for enterprise customers across Europe. Entra-to-Entra tenant consolidation and migration for a major Italian retail and fashion group, spanning multiple business entities and several European countries. Microsoft Entra Managed Tenancy Operations (MTO) design and implementation for a second major Italian brand, enabling centralised cross-tenant administration across European business units.
Worked as Global Black Belt for Microsoft corporate managing S500 customers throughout Europe, contributing to Entra Secure Service Edge product adoption and creating public references
Managed expansion of Entra ID Governance product line, implemented complex Identity Governance structures for critical customers, and integrated SAP Identity Cloud Service