Teams at One Identity

Own the GRC engineering program by building continuous control monitoring, common controls frameworks, automated evidence collection, control validation, risk workflows, asset prioritization, and audit-ready reporting. The role integrates identity, cloud, code repositories, endpoints, and ticketing systems; develops policy and control checks in code; guides AI-assisted compliance workflows; tracks program metrics; and represents the technical implementation during audits.

Leads the detection and response practice for corporate and cloud environments. Owns detection strategy, engineering, telemetry, signal quality, incident response, managed SOC oversight, threat hunting, automation, exercises, metrics, and notification procedures. The role leads major incidents, improves Microsoft Sentinel and Defender XDR coverage, investigates identity and cloud threats, and establishes scalable workflows and standards for a growing security function.

Own cloud and infrastructure security architecture across Azure and AWS, including network segmentation, workload isolation, hardened images, Kubernetes, policy as code, AI workload security, and vulnerability management. Build secure-by-default infrastructure modules, landing zones, and automated evidence processes. Establish cloud posture and workload protection practices, drive remediation through pull requests, and ensure controls satisfy ISO 27001, SOC 2, and future regulatory requirements.