The capitol, a crypto-bank regulator and an NSF-sponsored supercomputer share one small city.
Close to three in ten Cheyenne jobs are government jobs, and the agency that supervises Wyoming's digital-asset banks has its offices on Capitol Avenue. Add an atmospheric research supercomputer run by NSF NCAR, and the questions get unusual: who may approve a custody key, a payroll change or a research allocation?
- Identity Governance & AdministrationCybersecurity
- Privileged Access ManagementCybersecurity
- Secrets & Certificate LifecycleCybersecurity
- Machine & Workload IdentityCybersecurity
- Banking & Capital Markets PlatformsEnterprise Platforms
- Governance, Risk & ComplianceCybersecurity
- DevSecOpsCloud Engineering
In Cheyenne the work tends to fall into three groups.
State agencies need workforce identity, privileged access and audit trails that hold up to legislative and federal review. Special purpose depository institutions and fintechs need key-custody controls and access governance their examiners can test. Data-center and research computing operators need tight machine and operator access. We serve Cheyenne remotely from Frisco, Texas and travel in for workshops and launches.
There is no Cohash office in Wyoming. We work with Cheyenne organizations from our Frisco, Texas base, remotely day to day, and come up for discovery, design workshops, legislative-session cutovers and go-live.
- rules
- Wyoming breach notification, Wyo. Stat. §40-12-502Wyoming SPDI Act, Wyo. Stat. §13-12-101 et seq.
What's specific about Cheyenne
Each figure comes from a public source, linked on the card.
Government made up about 13,700 of the Cheyenne metro's 49,100 nonfarm jobs in September 2026, according to preliminary BLS figures.
source ↗ 02The Wyoming Division of Banking, the state regulator for banks and special purpose depository institutions, works from the Hathaway Building at 2300 Capitol Avenue in Cheyenne.
source ↗ 03The Division of Banking began accepting SPDI applications on 1 October 2019, and the Wyoming Banking Board has approved four SPDI charters since, the division reports.
source ↗ 04The NCAR-Wyoming Supercomputing Center opened in Cheyenne in 2012. It came out of a partnership among UCAR, the State of Wyoming, the University of Wyoming, Cheyenne LEADS, the Wyoming Business Council and Black Hills Energy.
source ↗ 05Interstates 80 and 25 meet in Cheyenne, which is also served by two major railroads and sits about 90 minutes from Denver International Airport, the local economic development group Cheyenne LEADS notes.
source ↗Who we work with in Cheyenne, and the rules they work under
-
State agencies and the capitol complex
Agencies in Cheyenne often share a central IT provider while keeping their own line-of-business apps and local admin accounts. Seasonal staff, legislative session hires and contractors come and go on fixed calendars. We tie account creation and removal to those calendars, put admin rights behind just-in-time elevation, and keep access logs in one place for auditors.
-
Digital-asset banks and fintech
An SPDI holds customer assets that move by private key, so the critical identity is often a signing key or an approval quorum instead of a person's password. We design who can propose, approve and execute a transfer, store keys in HSM or MPC custody, separate duties across teams, and produce the evidence an examiner needs to replay any approval.
-
Research computing and data centers
Large compute sites mix facility staff, vendor engineers and remote scientists who never set foot on site. Each group needs different reach into building systems, cluster management and storage. We separate those planes, move scheduler and storage service accounts to short-lived credentials, and record every privileged session on management networks.
-
Wyoming breach notification, Wyo. Stat. §40-12-502 ↗
After a prompt good-faith investigation finds misuse has occurred or is reasonably likely, businesses must notify affected Wyoming residents in the most expedient time possible and without unreasonable delay. The notice must include a toll-free number, the types of data involved, a description of the incident and its approximate date.
-
Wyoming SPDI Act, Wyo. Stat. §13-12-101 et seq. ↗
Created by House Bill 74 in 2019 and amended in 2020, with Division of Banking regulations in effect from 2020. Wyoming's digital asset custody law, Wyo. Stat. §34-29-101 et seq., and the custody regulations sit alongside it and were amended in 2021.
Most requested in Cheyenne
The services clients in Cheyenne ask us for most.
- CybersecurityIdentity Governance & Administration
- CybersecurityPrivileged Access Management
- CybersecuritySecrets & Certificate Lifecycle
- CybersecurityMachine & Workload Identity
- Enterprise PlatformsBanking & Capital Markets Platforms
- CybersecurityGovernance, Risk & Compliance
- Cloud EngineeringDevSecOps
01Does Wyoming have a consumer privacy law like Colorado's?
Not a comprehensive one. Wyoming relies on its breach statute in Title 40 and sector rules, so a business in Cheyenne that also serves Coloradans may still owe Colorado Privacy Act duties for those customers. Map where your customers live before deciding which rules apply.
02What has to go in a Wyoming breach notice?
Section 40-12-502(e) lists a minimum. That includes a toll-free contact number, the kinds of data involved, a general description of the incident, the approximate date, what you did to protect the system and whether law enforcement delayed the notice. We keep a pre-approved template so legal is editing facts, not drafting from scratch.
03We are applying for an SPDI charter. What identity work should be done before the exam?
Have the custody approval model written and working. Examiners will want to see who can initiate, approve and broadcast a transaction, how keys are generated and backed up, and how access is removed when someone leaves. We also set up logging so every approval can be traced to a named person and device.
04Can state agency contractors use their own company logins?
Often yes, through federation, as long as the agency still controls authorization and can cut access on its own. We set guest or B2B access with expiry dates tied to the contract, plus MFA rules the agency enforces instead of trusting the contractor's settings.
7ff1f490 - 01BLS, Cheyenne economy at a glancebls.gov ↗
- 02Wyoming Division of Bankingwyomingbankingdivision.wyo.gov ↗
- 03Wyoming Division of Banking, Special Purpose Depository Institutionswyomingbankingdivision.wyo.gov ↗
- 04NCAR CISL, NCAR-Wyoming Supercomputing Centercisl.ucar.edu ↗
- 05Cheyenne LEADScheyenneleads.org ↗
- 06Wyoming Statutes Title 40 (Wyoming Legislature)wyoleg.gov ↗
Tell us what you're running. We'll tell you what we'd do first.
A 30-minute working session with a senior engineer. No slides.
- The platform and the version you're on
- Where you need to get to, and by when
- What's custom: rules, plugins, integrations
- Any audit finding or deadline driving it