Designs, deploys, and operates IAM controls across cloud and on-premises infrastructure. Secures human, service, workload, and AI-agent identities through authentication, authorization, least privilege, identity lifecycle automation, and policy guardrails. Builds monitoring for anomalous access, supports incident response, conducts threat modeling, and maintains reliable IAM services with on-call responsibilities. Requires substantial security engineering and IAM experience, knowledge of modern identity protocols, programming or scripting proficiency, and security automation expertise.

Designs, deploys, and operates security controls for Dropbox’s AI and agentic infrastructure across cloud, Kubernetes, data stores, and on-premises systems. Secures AI agents and non-human workloads through authentication, authorization, networking, policy-as-code, infrastructure-as-code, and automation. Addresses prompt injection, data and model poisoning, AI supply-chain risks, and MCP integrations. Leads security initiatives, infrastructure hardening, governance, and cross-functional efforts while participating in on-call rotations.