• Secure SaaS, Endpoints, and the Extended Workforce. • Evaluate, configure, and harden SaaS applications (Google Workspace, Microsoft 365, Slack, HRIS, ticketing) to align with enterprise security policies. • Collaborate with Endpoint/IT teams to define and enforce baseline configurations for laptops, workstations, and other managed devices via MDM and EDR. • Develop and implement strategies and tooling for Data Loss Prevention (DLP) and the mitigation of insider risks within the organization. • Partner with Information Technology to implement, configure, and monitor highly secure workforce identity solutions (e.g., Okta/Entra and other IdPs). • Define and maintain RBAC/ABAC patterns for enterprise applications, focusing on role models, entitlements, and separation of duties. • Design and deploy controls that combine user identity, device posture, network context, and application sensitivity to aggressively enforce least-privilege access. • Author clear documentation and runbooks that make it easy for teams to consume and operate the controls you build.