IAM strategy, SSO, MFA enforcement, PAM, Active Directory hardening. Identity governance aligned to ISO 27001 and NIST. Privileged account audit and lifecycle management.