4.
Strong identity, access control, and application security background
Experience with SSO, SAML, OIDC, RBAC, service identities, least-privilege access models, secure SDLC, threat modeling, API security, secrets management, vulnerability management, and secure coding practices.