Name: Identidades: gobernarlas o caer — Ekoparty 2026
Start: 2026-10-07
End: 2026-10-09
Location: Ekoparty

About

Who I am

Since 2023 I've worked as an identity management and governance consultant, and I'm also an account manager: for the clients I own, I'm the main point of contact and I make the decisions about everything that happens in those accounts. My goal is easy to explain and hard to sustain: nobody should have more access than they need and, when an audit comes, everything should be provable.

I adapt to each client's platform: the NetIQ suite, Active Directory, Entra ID and One Identity's full Identity Fabric suite: Identity Manager (IGA), Safeguard (PAM), OneLogin (access management) and Active Roles (AD and Entra ID administration). But what I care about most is governance: defining who approves what, how access is reviewed and how to comply with ISO 27001 and NIST CSF without slowing the business down.

Outside work I'm studying for a B.Sc. in Cybersecurity, training in Blue Team and digital forensics with my own labs, building tools for my day-to-day work and writing on my blog. In 2026 I gave a talk at Ekoparty about identity governance.

Current role: Identity Management & Governance Consultant · Account Manager
Company: Plug-Zone, leading One Identity partner in LATAM
Platforms: NetIQ · One Identity Identity Fabric · Active Directory · Entra ID
Frameworks: ISO 27001 · NIST CSF 2.0 · CIS Controls
Education: B.Sc. in Cybersecurity (UFASTA)

Experience

Professional background

2023 — Present

Plug-Zone

Leading One Identity partner in LATAM

Current role

Identity Management & Governance Consultant

Account Manager

I manage and govern identities for clients of different sizes and industries on the NetIQ suite (IDM, IGA, NAM, Sentinel), One Identity's Identity Fabric suite, Active Directory and Entra ID. For the accounts I own, I'm the main point of contact and I make the technical and management decisions.

Keep each user's access aligned with their role through automated provisioning, periodic access recertification and segregation of duties (SoD) controls.
Audit identity environments against ISO 27001, NIST CSF and CIS Controls, and fix the compliance gaps I find.
Remediate vulnerabilities in identity platforms and the systems connected to them.
Centralize identity management so every change is recorded and operations never depend on a single person, which is key for business continuity.
Integrate identity platforms with all kinds of systems: databases, APIs, LDAP directories and each client's own applications, using standard connectors or custom development.
Work across One Identity's full Identity Fabric suite: identity governance with Identity Manager (IGA), privileged access with Safeguard (PAM), access management with OneLogin and Active Directory and Entra ID administration with Active Roles.

NetIQ IDM / IGA / NAMSentinelOne Identity Manager Safeguard (PAM)OneLoginActive RolesActive DirectoryEntra ID Databases · APIs · LDAPSoD

Capabilities

What I work with

Identity & access

Identity lifecycle, provisioning, access recertification, roles, SoD and privileged access.

NetIQ IDM / IGA / NAMOne Identity Manager (IGA)Safeguard (PAM)OneLoginActive Roles Active DirectoryEntra IDLDAP

Governance & compliance

Environment audits, gap analysis, remediation and audit documentation.

ISO 27001NIST CSF 2.0CIS Controls SOXISO 9001Zero Trust

Integration & automation

Integrations with databases, APIs, directories and in-house applications, scripting and custom tools.

SQLREST APIsLDAP PythonBashJavaScript

Blue Team & DFIR

Ongoing training and my own detection, response and forensics labs.

WazuhSplunkTheHive CortexDigital forensics

Infrastructure

Linux and Windows environments, virtualization, containers and cloud.

LinuxWindows ServerDocker ProxmoxVMwareAzureAWS

Applied AI

AI agents and automations I use in my daily work.

Claude CodeMCPN8NOllama

Credentials

Certifications & education

Certifications

Identity Manager Technical Specialist
One Identity · enables managing integrations
Identity Manager (IGA) — Sales & Technical Presales Accreditation
One Identity
Safeguard (PAM) — Sales & Technical Presales Accreditation
One Identity
Identity Manager Implementation Professional
One Identity · in progress
SC-200: Microsoft Security Operations Analyst
Microsoft · in preparation
SC-900: Microsoft Security, Compliance, and Identity Fundamentals
Microsoft · in preparation
CyberOps Associate
Cisco
Technological Surveillance & Strategic Intelligence
Argentine Army
CUC 2025
Cambridge ICE
Cambridge English

Education

B.Sc. in Cybersecurity
Universidad FASTA
Information Systems Engineering
UTN · 2023 — 2024
Bilingual Bachelor in Natural Sciences
Modern School

Languages: Spanish — native English — advanced (Cambridge ICE)

Speaking

Speaker

Ekoparty 2026Buenos Aires · October 2026

Identities: govern them or fall talk in Spanish

Why identity and access management is one of an organization's main lines of defense, when most breaches start with a compromised credential.

View the talk How I prepared it

Projects

In-house tools & labs

Open-source software I build for identity, security, automation and my own work environment.

View GitHub

Identity

lazyldap

Terminal LDAP browser in the style of lazygit: LDAPS/StartTLS profiles with keyring passwords, directory tree, LDAP filter search, schema-aware editing and Excel/LDIF export. Works with Active Directory, OpenLDAP and eDirectory, even over SSH.

ldapactive directorypythontui

Hardening

netguard

Linux hardening console in a single CLI/TUI: network zones, VPN-first nftables kill switch, evil twin detection, encrypted DNS, kernel sysctls, MAC/IPv6 privacy, exposed ports and per-app firewall (OpenSnitch).

linuxnftablesvpntui

SOC

wazuh-homelab

Single-node Wazuh SIEM/XDR stack on Docker Compose: manager, OpenSearch indexer, dashboard and VirusTotal & TheHive integrations.

siemwazuhdocker

SOAR

thehive-homelab

Case management with TheHive, Cortex, Cassandra and Elasticsearch on Docker Compose. Turns Wazuh alerts into cases and runs analyzers (VirusTotal, MISP) automatically.

soarthehivecortexdocker

AI + Pentesting

HACKER-MCP-COMMANDER

MCP server and skill for pentesting with Kali Linux in Docker: 35 tools (nmap, sqlmap, hydra…), isolated network, per-session evidence and guidance for AI agents.

mcpkalidocker

Integrations

lazyapi

Postman-style terminal REST client: collections, .http-style request editor, environments with keyring secrets, inherited auth, history and curl/Postman import and export.

apirestpythontui

Data

lazydb

DBeaver-style terminal database client: profiles with TLS and SSH tunnel, object tree with DDL, SQL editor, editable results applied in one transaction and Excel/CSV export. PostgreSQL, MySQL/MariaDB, SQL Server and SQLite.

sqlpostgresqlpythontui

AI

MY-AGENT-SKILLS

Structured prompts and workflows for AI agents: Claude Code, N8N and agentic automation.

ai agentspromptsautomation

Linux

D4rkFiles

Arch Linux dotfiles: Hyprland and Qtile with a theme engine, modular installer and everything configurable per user.

archhyprlandqtile

Hardware

flipper-zero-Utils

Custom payloads, scripts and tools for Flipper Zero pentesting and RF experimentation.

flipperrfpentesting

Independent consulting

I also work independently

Besides my role at Plug-Zone, I help organizations independently in these areas. I don't sell a tool: I work with what you already have or help you choose.

Identity management & governance

Assessment of how identities are managed today, design of joiner/mover/leaver processes, access recertification, roles and segregation of duties, and support choosing and implementing an IGA solution.