Lead IAM strategy and a small engineering team to govern identities and access across the corporate estate. Own IAM governance, RBAC and SoD standards, access reviews/certification, privileged access/JIT, non-human identity governance, and platform operations (Entra ID, Okta). Partner with CISO, IT, and Internal Audit to drive roadmap, SaaS onboarding, audit readiness, and metrics-driven reduction of standing and orphaned accounts.

Lead corporate security for identity, endpoints, cloud and SaaS integrations. Architect passwordless and Zero Trust, manage MDM/EDR/EDR/XDR, tune SIEM, run vulnerability management, lead detection and response, automate workflows (Python/PowerShell, Terraform), maintain IaC hardening, and support audits, training, and vendor security assessments.

Engineer and operate technical security controls across corporate infrastructure (on-prem and cloud). Responsibilities include VM hardening, AD/Entra ID controls, patch automation, cloud security posture, policy-as-code, micro-segmentation, network security validation, evidence collection for audits, and remediation of findings.