Capabilities
What I build and operate, stated at the level a hiring executive or a consulting buyer needs in order to scope the work.
Security Architecture and Engineering
Enterprise security architecture, secure-by-design, architecture governance, reference architectures, security standards, architecture review boards, threat modeling, cloud security architecture, application and API security, Zero Trust.
Identity and Access Management
Identity governance and administration, privileged access management, customer identity, single sign-on and federation, multi-factor authentication, role engineering, access certification, separation of duties, cloud identity and entitlement management, non-human and agentic AI identity.
AI Governance
Microsoft Copilot and Copilot Studio governance, agentic AI guardrails, non-human identity lifecycle, AI access boundaries, data minimization, human-in-the-loop oversight, NIST AI Risk Management Framework, shadow AI risk.
Enterprise Cybersecurity Leadership
Cybersecurity strategy, enterprise risk management, technology transformation, security operations, cyber resilience, executive governance, Board communication, regulatory leadership, cyber investment strategy, budget and portfolio management.
Operational Technology and Critical Infrastructure
Industrial control systems, SCADA, smart grid, NERC CIP, critical infrastructure protection, Executive Order 13636, secure remote access, grid modernization, OT and IT convergence.
Risk, Compliance, and Third Party
Three lines of defense, control mapping, regulatory examination readiness, risk register and issue management, third-party and supply chain cyber risk, evidence automation, audit defensibility.
Operations and Service Management
24x7 operations, L1 through L3 models, major incident command, post-incident review and root cause analysis, SLA, KPI, and KRI design, disaster recovery and business continuity, ITIL and ITSM integration, Agile and operating model transformation.
Platforms
SailPoint, CyberArk, Delinea, Oracle Identity Manager, Ping Identity, RSA, Active Directory, Microsoft Entra ID, SAML, OAuth, OpenID Connect, FIDO2, AWS, Azure, Google Cloud, CASB, DLP, certificate lifecycle management.