At ACEN we believe a solid security baseline exists of three things: people, processes and tools. That first one is where we really believe the biggest impact is made. Our company is built on bringing the right people together, and Robin definitely is one of those.
To give you a glimpse into the field of Identity Governance and Administration (IGA) in the context of ACEN, we sat down with Robin Gorris. With over 20 years of experience in the field, Robin is one of our three IGA Leads and a true veteran in the identity space.
Whether you are looking to pivot your career or want to explore the world of identity management, his journey offers great insights. Read on to discover his story, and find out how you can join our upcoming IGA Masterclass!
Could you share a bit about your journey at ACEN?
My journey in identity security actually started about 20 years ago, focusing heavily on IT security and early identity management tools like SiteMinder, Sun Waveset, Oracle IDM, Forgerock IAM, and later on Microsoft Identity Manager, Omada, Saviynt and MidPoint.
Over time, I realized I didn’t just want to build and configure solutions. I wanted to truly think them through from an architectural and strategic standpoint. And ACEN offering me the time and space to make that transition was a real turning point.
Today, I am one of the three IGA Leads here. In my current role I’m wearing multiple hats, my job as an expert architect is mixed in with being a coach and coordinator for a team of talented specialists. It’s been a great ride, and honestly, time has flown by. That’s always a good sign, I think.
What does a typical workday look like for you? What are your main roles, responsibilities, and tasks?
No two days are exactly the same. Since we manage projects end-to-end, the diversity in clients and their questions is enormous.
A typical day often starts with a stand-up with the project team. From there, I might head into client conversations and workshops. A big part of my responsibility is understanding exactly what an organization needs and getting to the question behind the question. You see, in our job it’s important to get to the root of the problem before we can start discussing next steps. I translate those complex business requirements into technical specifications, design tailored architecture models, and guide projects through their lifecycle.
Beyond the technical work, there is also some change management involved. I advise clients on how to structurally embed sustainable identity governance into their broader security strategy, ensuring that when a new system goes live, employees actually know how to use it.
What do you enjoy most about your job?
It’s definitely the combination of complexity and impact. IGA touches the very core of how an organization secures its data and systems. When I get to design an architecture that truly works, one that is scalable, secure, and that people can actually use without friction, that is an incredibly rewarding feeling.
“What truly makes my day is when a client says: ‘This is exactly what we needed, but we didn’t know how to articulate it.’ That’s when you know you’ve gone beyond the technical brief and genuinely added value.”
– Robin Gorris, IGA Expert at ACEN
What are some of the biggest but most rewarding challenges you face in your role?
Identity governance is a domain that is constantly changing with new platforms, new threats, and new compliance requirements emerging. But the real challenge is managing the complexity of a client’s specific environment. Often, we are migrating them away from legacy systems while simultaneously trying to fix their old processes and simplify their workflows.
To tackle this, I rely heavily on the “Five Whys” technique. When a client asks for a specific technical setup, I keep asking “why” until we reach the absolute core of the business need. Simplification is the ultimate goal. Complexity is the enemy of security. If something is too complex, nobody understands it, and you can’t properly secure it.
I often compare it to playing three-dimensional chess.
“You aren’t just configuring a product. You have to balance technical execution, the underlying business drivers, end-user adoption, and overarching security controls all at the same time. You have to keep all those balls in the air.”
– Robin Gorris, IGA Expert at ACEN
Could you tell us a bit about your team and how you work together?
Our team is professional, committed, and straightforward. We are people who get things done, but we aren’t afraid to challenge each other’s ideas or our clients’, when it leads to better outcomes.
We try to physically be together in the office at least two days a week. That person-to-person contact is fantastic for cross-pollination. If one of us is stuck on a complex puzzle, someone else can pull up a chair, look at it with fresh eyes, and say, “I solved a similar issue this way, what if we try that?” There is absolutely no threshold to ask for help here. That shared experience and willingness to elevate each other really stands out at ACEN.
What advice would you give to someone who is interested in pursuing a career in this field?
Be curious, and stay that way! This is a niche that offers a massive amount of depth, so you have to be eager to learn. Every single day you will discover something new.
Technically, you need a broad technological horizon, but you also need strong analytical skills. You must be able to simplify complexity and communicate it clearly to non-technical stakeholders. Organizations aren’t looking for “yes-men”. They are looking for consultants who dare to ask critical questions, stand their ground, and say: “We are going to solve your problem, here is how, and here is why.”
Ready to start your journey? Join our IGA Masterclass!
ACEN is hosting an IGA Masterclass, designed to give you a head start in the world of Identity Governance and Administration.
Whether you are looking to transition your career or level up your existing skills, this is your chance to learn directly from experts like Robin.