↓Skip to main content
Victor Hernandez Guzman

Victor Hernandez Guzman

Identity, Distributed Systems and Agentic Engineering

I've been writing software for over 20 years, I am an expert in authentication, authorization, and security for the cloud, with a deep focus on Identity & Access Management (IAM) and hyperscale cloud infrastructure. Over the years at companies like Microsoft, DocuSign, and Salesforce, I've spent my time figuring out how to make complex distributed systems secure and reliable.

That work has ranged from building bare-metal identity providers for Microsoft Azure, shipping AuthN/AuthZ SDKs, and delivering passwordless authentication (WebAuthN/Passkeys) to millions of Microsoft Accounts, to designing Change Data Capture pipelines for identity systems and building multi-agent AI platforms.

I enjoy working at the intersection of modern security standards and distributed systems architecture, spanning workload identity protocols like SPIFFE and WIMSE, as well as OAuth, OIDC, SAML, WebAuthN, and zero-trust security models.

Recent

From Non-Human Identity to Agent Identity: Where the Threshold Sits

·6 mins
Agent Identity Non-Human Identity AI Agent Security Identity and Access Management Agentic AI
Enterprise IAM treats machine identities as predictable workloads, but AI agents choose their own actions at runtime. This article offers a three-part threshold test: model-directed control flow, runtime capability binding, and delegated human authority across hops. It describes the four failures that follow when agents run on service accounts, and shows how a task-bound, short-lived composite token fixes them.