application security program management, secure SDLC, enterprise CI/CD pipelines, SAST, SCA, DAST, SBOM, penetration testing, code reviews, API security, Akamai WAF/CDN, vulnerability management, software supply chain security, application secrets management (CyberArk Conjur, Google Secret Manager), Infrastructure as Code (Terraform), security automation and policy-as-code, cloud-native application security, GKE/container security, and AI/LLM application and agent security. enterprise identity providers (Ping Identity / PingFederate / PingOne / Ping AIC), LDAP, SSO, SAML, OAuth 2.0, OpenID Connect, JWT, MFA, SCIM, identity lifecycle management, Privileged Access Management, GCP IAM, service accounts, Workload Identity Federation, workload/machine identity, and Identity-Aware Proxy (IAP).