AI agents need their own identity
Bearer tokens and shared credentials fail for non-human actors. Why sender-constrained tokens and lifecycle controls matter for autonomous systems.
Read more →I build the systems that keep a company working — identity, automation, and AI in IT operations.
I'm an IT Platform Engineer in Porto, Portugal. 15 years from support floors in São Paulo to running IAM and security tooling for a fintech. I write about the craft of internal engineering — the work nobody sees until it breaks.
now building — an AI assistant for access reviews · read the log →Latest writing
"Deactivate in Okta" is not "access revoked"
Deactivating a user kills tomorrow's logins, not today's sessions, tokens, or unmanaged SaaS. What revocation actually takes.
Read more →Okta org as code
Moving Okta configuration from the console to Terraform. Why drift detection, promotion, and team workflow matter more than syntax.
Read more →