Design and implement zero trust and least-privilege access across identity, devices, networks, and applications. Deploy and manage MDM for macOS, enforce SSO/OAuth controls, detect shadow IT, define AI/LLM service identity standards, automate security tooling, and maintain CIS/NIST-aligned baselines to reduce manual toil.