Deep knowledge of IAM/PAM governance practices, including identity lifecycle management, access certification, least privilege, segregation of duties, role engineering, privileged-account coverage, just-in-time access, credential and secrets management, session oversight, and non-human identity risk. Expanding governance for non-human identities, including service accounts, workloads, applications, automation, bots, and AI agents, by establishing accountable ownership, lifecycle controls, credential safeguards, periodic certification, and least-privilege access.