Sigmaton Book a consultation

Services

Four practices. One security standard.

Identity, data protection, integration and automation are usually bought from four vendors and held together by hope. We deliver them as one program, with the same controls, evidence and ownership throughout.

secure · identity & privileged access

Access that’s easy for users and hard for attackers.

We design and roll out modern authentication and privileged access, from passwordless sign-in on virtual desktops and laptops to MFA for the most privileged mainframe accounts.

Book an identity assessment
  • Passwordless and adaptive MFA for desktops, VDI and web apps
  • Single sign-on and federation with SAML, OAuth and Azure AD
  • Privileged access vaulting and privileged password management
  • Endpoint privilege management and break-glass access with MFA
  • Role-based and policy-based access models
  • Zero Trust roadmaps and access reviews

Experience

Passwordless adaptive MFA for VDI and laptops (PingID with Citrix NetScaler and Cisco ISE) and mainframe privileged-user MFA and SSO at DTCC; privileged access vaulting and break-glass access at Providence.

  • PingID
  • Citrix NetScaler
  • Cisco ISE
  • Azure AD
  • miniOrange
  • IBM Mainframe

protect · data protection

Know where sensitive data lives, and stop it leaving.

We roll out data loss prevention in stages, from monitoring to coaching to blocking, so controls protect regulated data without stopping the business.

Book a data protection assessment
  • Data discovery and classification
  • DLP for email, endpoint, cloud (CASB) and network
  • Data protection policies, exceptions and user coaching
  • Email authentication with SPF, DKIM and DMARC enforcement
  • Audit findings remediation with risk and compliance
  • KRIs and reporting for leadership reviews

Experience

DLP across email, endpoint, cloud and network, with discovery, classification and policy controls, at Providence; DMARC implementation at DTCC.

  • Azure Information Protection
  • CASB
  • DLP
  • DMARC
  • ServiceNow
  • Power BI

connect · ERP & integrations

Systems of record that stay in sync.

We migrate ERPs, connect storefronts, devices and partners through secure APIs, and test the flows that move money, orders and member data.

Plan an integration
  • ERP migration: fit-gap, data migration, training and cutover
  • API and OAuth integrations, including iPaaS such as Celigo
  • Commerce storefronts with single sign-on
  • Payments and banking integrations
  • Healthcare EDI: 834, 820, 270/271 and 278
  • Integration, performance and user acceptance testing

Experience

An end-to-end Agiliron-to-NetSuite migration, Konami and Light & Wonder gaming machines connected to a NetSuite rewards platform over OAuth, and payments integration strategy with Fiserv at UnitedHealth Group’s Optum.

  • Oracle NetSuite
  • Celigo
  • Shopify
  • Postman
  • SoapUI
  • JMeter

automate · AI & workflow automation

Automation your security team will approve.

We build AI agents and process automation that draft, match and route work inside your systems, with scoped access, human approval and a full audit trail.

Explore the labWriter AI practice →
  • AI agents for finance, operations and IT workflows
  • Writer AI implementation as a Writer partner
  • Robotic process automation for repeatable tasks
  • Approval routing and exception handling
  • Agent access reviews and monitoring
  • Adoption, training and runbooks

Experience

Writer AI implementation partner, with UiPath process-automation experience and interactive walkthroughs of our agents in the Sigmaton Lab.

  • Writer AI
  • UiPath
  • Microsoft Teams
  • ServiceNow
  • REST APIs

How we engage

Four ways to work with us.

Every engagement is fixed in scope before it starts. Pricing is agreed after a scoping call.

Start here

Assessment

2–3 weeksfixed scope

A clear view of where you stand and what to fix first.

  • Identity & access or Zero Trust assessment
  • Data protection gap assessment
  • ERP and integration readiness review
  • Automation opportunity map
Scope an assessment

Core work

Implementation

scoped delivery

We deliver the change end to end, with evidence at every stage.

  • Passwordless MFA and SSO rollouts
  • PAM vaulting and break-glass access
  • DLP and classification policies
  • ERP migrations, integrations and AI agents
Plan an implementation

Senior leadership

Program leadership

fractionalor rescue

Program leadership for work that’s underway, stalled or off track.

  • Roadmaps, KPIs and steering-committee reporting
  • Budget forecasting and variance control
  • Vendor and third-party risk management
  • Audit remediation plans
Talk about a program

After go-live

Run & improve

ongoing

Keep controls effective as your business changes.

  • Access reviews and certification support
  • Policy tuning and exception handling
  • Integration and agent monitoring
  • Quarterly roadmap reviews
Discuss ongoing support

How engagements start

From scoping call to signed scope.

Every engagement is defined before it begins, with a fixed scope and price agreed up front.

Book a consultation

The path

  • A 30-minute scoping call with the people who own the problem
  • A written scope with outcomes and measures
  • A fixed price agreed before work starts
  • Named owners, a delivery plan and a handover date

Questions

Before you book.

Straight answers to what buyers usually ask us first.

Why don’t you publish prices?

An identity assessment and a multi-quarter ERP migration aren’t the same job. We agree a fixed scope and price after a scoping call, before any work starts.

Can you work with the tools we already own?

Usually, yes. We have hands-on delivery experience with PingID, Azure AD, Citrix NetScaler, Cisco ISE, Azure Information Protection, NetSuite, Celigo, Shopify and ServiceNow, among others. We start from what you have before recommending anything new.

Are DTCC, Providence and the others your clients?

No. They’re enterprises where Sigmaton’s leadership delivered programs in prior roles. We name them to show the environments our standards come from, not as client endorsements.

Do you work with our security, risk and compliance teams?

Yes, from the start. We bring the access design, data boundaries and evidence approach to your security, risk and audit stakeholders early, so their review is a checkpoint rather than a blocker.

Can you take over a program that’s already in flight?

Yes. Program leadership engagements cover roadmaps, budgets, vendor management, steering-committee reporting and audit remediation for work that’s underway or off track.