What You Will Bring to ChargePoint
Lead enterprise identity strategy and platform architecture, encompassing cloud identity, directory services, and the transition of applications to modern authentication standards (OAuth 2.0, OIDC, SAML).
Define and implement reference architectures for secure authentication across CLI, browser, and agentic workflows.
Establish agent identities as a foundational element within the identity platform, enabling access control and auditability for automated and machine-assisted workflows.
Build and implement advanced identity security controls such as Conditional Access policies, Privileged Identity Management (PIM), and risk-based authentication.
Scale device management and identity governance systems to meet the demands of AI-powered operations. Ensure reliability, performance, and compliance across large organizational environments.
Partner with security, infrastructure, and product teams to align on architecture, build strategy, and operational ownership.
Drive IAM application development: code, design, and implement solutions with deep knowledge in AWS, Azure, Teleport, and Terraform. Deliver reliable solutions that keep engineering teams productive.
Drive IAM projects end-to-end: take ambiguous access problems, define requirements, architect solutions, and own the rollout and operationalization — not just the design.
Refine role design and access patterns across AWS, Kubernetes, SaaS, and internal systems — eliminate unnecessary privileges, reduce manual grants, and establish scalable baseline access.
Run and improve user access reviews (UAR): develop, execute, and design a UAR process and solution that meets compliance requirements while improving real security signal — minimize approver burden through scoping, automation, and clear decision support.
Identify high-risk permissions and misuse paths, build controls and mitigations, and drive adoption with partner teams to reduce risk exposure.
Operate with strong security judgment and high signal: distinguish meaningful IAM risk from noise, gather context efficiently, and escalate with crisp rationale and actionable mitigations.
Document and standardize the paved road: write procedures, runbooks, and automation so access decisions are consistent, scalable, and not dependent on tribal knowledge.
Conduct Agentic AI IAM requirement analyses, architecture reviews, and security gap assessments across enterprise applications, cloud platforms, AI services, and infrastructure environments.
Develop automation for access management and secrets lifecycle operations.
