What the firm does
Most engagements start with a practical problem. An MFA rollout is stalled because enrollment was announced before the help desk was ready. A Conditional Access policy blocks service accounts nobody inventoried. An auditor asks who approved a privileged role assignment six months ago, and nobody can produce the record. CogniAccess works on problems at that level of detail.
The practice covers Entra ID tenant design and hardening, Conditional Access policy design, phishing-resistant MFA, single sign-on and federation over SAML and OpenID Connect, Okta implementation and migration, access reviews and joiner–mover–leaver process design, and the endpoint identity work that ties devices into all of it through Microsoft Intune. The full list is on the services page.
Who does the work
Every engagement is led and delivered by the founder, Jalaluddin Sediq, an IAM architect with more than ten years in information technology. Since February 2024 he has worked inside a federal agency environment, designing and operating Entra ID authentication, federation, MFA, and Conditional Access under FISMA and NIST 800-53 discipline. There is no bench behind him and no junior substitution: the person who scopes the work is the person who configures the tenant, writes the policy set, and answers for the result. Background and credentials are on the about page.
Who the firm works for
Federal programs, through primes. CogniAccess subcontracts to prime contractors that need a senior identity architect on a program and cannot staff the role at that level in-house. The firm onboards as a subcontractor and works inside the program's existing authorization and change processes. Registration with SAM.gov is in progress; see the capabilities page for NAICS codes and company data.
Commercial organizations, directly. Mid-size organizations on Microsoft 365 or Okta usually call when something forces the issue: a cyber-insurance renewal that requires MFA everywhere, a merger that leaves two identity platforms running side by side, or an audit finding about stale privileged access. Engagements are scoped directly with the client.
How engagements are structured
Three models cover most of the work. Time-and-materials staff augmentation fits long-running federal programs, billed hourly against a rate card with a defined ceiling. Fixed-scope projects fit defined outcomes such as an MFA rollout or a Conditional Access build, priced against a written statement of work with milestone acceptance. Advisory retainers give architecture review boards and audit-readiness efforts a senior identity voice for a set block of hours each month. Rates are set per engagement and are not published.
Starting a conversation. Prime contractors scoping an identity workstream and organizations planning an IAM project can reach the firm at info@cogniaccess.com. A short description of the environment and the deadline is enough to begin.