Senior Systems Engineer
I run the identity and corporate apps infrastructure at Robinhood: Okta, GCP, Google Workspace. Lately my focus has been identity and access management: making AI tooling adoptable across the company without losing control of who can do what.
I own the identity stack: how people get in, what they can touch, and how access ends when they leave.
Building the identity layer that lets enterprise AI tools work: bridging Okta auth to apps that don't support direct OAuth, and handling the lifecycle edge cases SCIM can't reach.
Removing repetitive ops work with scripts and integrations built to hold up over time.
I own the core infrastructure layer the company depends on to build and ship: Okta, GCP, and Google Workspace.
Moving Okta config from clicks to Terraform. Config drift disappears, changes get reviewed like code, and policy stays consistent across the tenant.
Building the GCP foundation that lets engineers ship AI-assisted tools to production safely. Terraform-managed IAM, project structure, and access controls, so teams move from local prototypes to hosted services without creating sprawl.
Tightening Google Workspace: access policies, DLP, third-party OAuth, audit coverage. The attack surface gets bigger every time someone installs a new AI tool, and that's the part I'm watching.
I own the identity, cloud, and collaboration stack that the company runs on at Robinhood. The mandate: harden the foundation, make AI tooling adoptable, and keep things from sprawling.
IAM ownership, Terraform-driven config, lifecycle automation
Company cloud access, AI workload hosting, sprawl prevention
DLP, OAuth governance, access policies, Workspace administration
Lifecycle governance, technical review authorship, tech debt cleanup