• Architect and secure Azure Application Registrations within Allstate’s Microsoft Entra ID tenant. • Govern permission and consent management, enforcing least privilege through robust delegated and application permission models. • Manage user and admin consent settings and develop automated workflows for reviewing and approving sensitive permission requests. • Implement application access reviews to validate permissions and ensure least privilege access. • Securely manage application secrets and certificates, integrating with Azure Key Vault. • Design and enforce Conditional Access policies based on user, location, device, and risk signals. • Integrate security checks into CI/CD pipelines for application registration configurations. • Collaborate with development, DevOps, and infrastructure teams to embed security into application lifecycle. • Conduct threat modeling and risk assessments for authentication and authorization flows. • Monitor application and service principal activity using Microsoft Sentinel, Azure Monitor, and Entra ID audit logs. • Lead structured problem-solving efforts for complex, high-impact security and identity-related challenges. • Develop and propose actionable, scalable solutions aligned with enterprise risk appetite and security strategy. • Drive end-to-end execution of solutions—ensuring delivery, stakeholder alignment, and measurable outcomes. • Influence teams and leadership to adopt new approaches and remediate systemic issues. • Collaborate with engineering, operations, and governance teams to ensure solutions are embedded and sustained. • Track and report progress on key initiatives, highlighting risk reduction and business impact. • Stay current on emerging threats, technologies, and regulatory requirements to inform strategic decisions.