Zero Trust & Identity Security Transformation

Identity had become the primary attack surface, and the existing access model hadn't kept pace — authentication was largely static, and privileged access wasn't being reviewed on any regular cadence. I led the initiative to move the organization toward a genuine Zero Trust posture.

That meant rolling out MFA and Conditional Access broadly, implementing certificate-based authentication for stronger assurance, and standing up adaptive access policies that adjust in real time to risk signals rather than treating every login the same. Alongside that, I built out a recurring privileged access review process, closing a long-standing governance gap around who had standing access to sensitive systems and why.

In parallel, I served as the security subject matter expert on a major cloud modernization initiative, leading the security side of an Intune and Microsoft 365 rollout that brought thousands of devices under centralized, policy-enforced management. I defined the compliance baselines and device security controls that shipped with that rollout, so every enrolled device met a consistent security bar from day one rather than being hardened after the fact.

Together, these efforts moved identity and endpoint security from a patchwork of point solutions to a coherent, policy-driven system — one where access decisions are continuously evaluated rather than granted once and forgotten.