Researching and building at the intersection of identity management and AI systems. Focused on how authentication, authorization, and access control evolve as AI agents gain access to enterprise tools and data.

Designed a new capability that extended Okta's device assurance product with custom posture checks, owning the full experience across the admin console and endpoint agent. Partnered with the research team and spoke directly with customers to surface migration blockers that shaped the product direction. Much of this work centered on balancing admin flexibility against complexity, shipping speed against security rigor, and device enforcement against end-user trust in BYOD environments. Mentored junior designers and partnered with design and research leadership on annual planning and cross-functional alignment.

Extended Okta's device assurance platform with third-party integration support — including Chrome Device Trust connector — enabling organizations to incorporate external device security signals into access decisions. Designed the v2 end-user sign-in experience, expanding support for biometric factors, custom TOTP, and WebAuthn. Both efforts required close cross-functional coordination to ship meaningful capability without adding admin complexity.

Partnered with a cross-functional team to redesign Okta's core authentication policy engine — the system admins use to configure what type of authentication applies to which users and applications. Worked closely with research to gather customer insights, which led to a design that lets admins choose between assurance level guidance or granular authenticator selection, with contextual security warnings as guardrails. OIE now powers phishing-resistant passwordless authentication for thousands of organizations.