Technical Skills: Deep understanding of privileged account lifecycle management, credential vaulting/rotation, privileged sessions, JIT/JEA, RBAC, break-glass access, service accounts, and entitlement reviews. Understanding of networking and infrastructure security, including PKI, X.509 certificates, SSH keys, cryptography, secrets management, SIEM, monitoring, and vulnerability-management tooling.