Operate and support on-premises and cloud identity services and their configuration, including Active Directory domain services, Microsoft Entra ID, Microsoft 365, Duo, YubiKey/FIDO/PIV authentication, CyberArk/PAM, Saviynt/IGA, Splunk, Active Roles where applicable, PingOne/Aura where applicable, 1Password, HashiCorp Vault, and connected enterprise applications. Support privileged and non-human identities, including elevated accounts, service accounts, application accounts, RPA accounts, resource/test accounts, B2B/guest identities, and accounts requiring vault onboarding, password rotation, or ownership validation.