Owner of global IAM infrastructure for a Microsoft-centric SaaS environment. Design and maintain Entra ID, SSO (SAML/OAuth/OIDC/SCIM), PAM/CyberArk, automation via PowerShell and Graph API, enforce zero-trust and RBAC, monitor and remediate identity alerts, manage service accounts and JML automation, lead IAM incident response, maintain runbooks and provide on-call coverage.

Lead enterprise security strategy and architecture, create repeatable secure reference architectures and developer guardrails, perform threat modeling, embed Security by Design across product lifecycles, mentor senior security staff, evaluate third-party tech, and communicate technical risks to business leaders to enable secure, scalable SaaS growth.