Bonus, not required: policy-as-code or fine-grained authorization frameworks (OPA/Rego, Cedar, Zanzibar/ReBAC), FIDO2/WebAuthn and passkey deployments, endpoint security controls (EDR, device management, OS hardening), network segmentation patterns, or experience securing enterprise SaaS and internally built business applications and their API integrations. Secure the enterprise supply chain: Own supply chain risk across software, SaaS, and people: packages and applications installed on endpoints, SaaS platforms and integrations with standing access to corporate data, and contractors and BPO with access to critical Roblox data and operations.