Aaron Rapport

I lead identity engineering for one of the world’s largest retailers: workforce IAM (425,000+ associates and 25,000+ contingent workers), customer identity (140M+ registered users, 20M+ monthly active), external vendor identity (125,000 identities) and identity governance, on a multimillion-dollar capital and operating budget.

• •I lead a team of roughly 40 spanning workforce IAM, customer identity, vendor identity, directory services, PAM and identity governance: full-time engineers plus global contractors and flex specialists, with a manager, a domain lead and three tech leads reporting to me. I grew the function from a team of 7, hiring 15 engineers and 100+ contractors.
• •I directed a 100+ person, multi-team program that modernized thousands of business-critical and custom applications to standards-based authentication in two years.
• •I architected the consolidation of multiple legacy identity providers into two modern, cloud-native platforms across 20+ enterprise brands, working inside union agreements and strict workforce-compliance requirements.
• •I’m leading the ground-up rebuild of the consumer identity platform, with built-in fraud and bot defense and passkey/WebAuthn support the legacy platform could not offer.
• •I own non-human and agentic identity across the consumer and workforce estates, and built the guardrails and training that let teams adopt agentic AI safely, including a one-click process that manages agent identities from creation to retirement.
• •I’m accountable for regulatory and audit governance across the identity estate (PCI DSS, HITRUST, SOC 2), lead identity major-incident response, and serve on accelerator tiger teams reporting to C-suite executives.
• •I significantly raised platform availability and tightened major-incident response, cutting time-to-engagement on incidents by more than 80%.
• •I redesigned the workforce authentication experience, sharply reducing daily login friction for 425,000+ associates and reclaiming significant labor productivity.
• •I rebuilt a waterfall IAM organization into an agile practice with intake, review and feedback loops and a one-sprint SLA, and carved directory services, PAM and secrets management into dedicated teams.
• •I delivered enterprise MFA for associates and vendors that meets state privacy law, PCI, union agreements and no-personal-device constraints, and introduced SCIM provisioning, custom OIDC token brokers and FIDO2/passwordless for the workforce.

• Leadership
• IAM
• IGA
• PAM
• SSO
• Entra ID
• Okta
• Ping Identity
• DaVinci orchestration
• SailPoint
• FIDO2 / passkeys
• SCIM
• SPIFFE/SPIRE
• Non-human & agentic identity

I was the principal technical authority for mobility security and the associate mobility platform.

• •I directed the architecture and rollout of 100,000+ managed mobile devices in a 12-month window to keep the business running through the COVID-19 pandemic: a zero-to-one platform on a hard deadline.
• •I directed the development and Tier-1 vendor partnership behind a SCEP certificate proxy that replaced per-app logins (35+ seconds per app per session on shared devices) with a single device login for 400,000+ associates, with ring deployments across 50+ app platforms.
• •I designed and oversaw a replacement for the vendor’s Workspace ONE launcher: a custom associate-first platform with zero-trust controls and low-friction login, from idea to production.
• •I delivered custom solutions for Ocado-based grocery fulfillment covering in-facility and on-the-road operations, built product-first with rapid iteration.
• •I owned enterprise penetration testing, hardware lifecycle evaluation and major incident response for mobility.

• Android
• iOS
• MDM / UEM
• SCEP
• Cert Proxy
• Zero Trust
• Kotlin
• Java
• Workspace ONE
• Product leadership

I rescued a critically delayed, over-budget Windows 10 migration.

• •I restructured the deployment methodology for a migration spanning 2,400+ physical locations and landed the program on time.
• •I drove automation frameworks that ran daily across 75,000+ endpoints, improving stability, security posture and user experience at fleet scale.

• Windows
• PowerShell
• .NET
• Automation
• Large-scale rollout
• Security

Pre-seed, venture-track company building authentication technology for frontline and deskless workforces, alongside four other founders and an international consultant.

• •I own product architecture and the technical roadmap: credential model, lifecycle and supersession logic, hardware tiering, and authentication assurance levels aligned to NIST SP 800-63B.
• •I drive intellectual-property strategy, from conception and disclosure history to invention assignment and patent positioning.
• •I established the corporate and legal structure: a Delaware C-corporation with an international subsidiary, founders’ agreements and fundraising risk governance.

• Founder
• Authentication
• NIST SP 800-63B
• Product architecture
• IP strategy

Contract engagement at The Kroger Co.

• •I partnered with executive leadership and enterprise engineering to architect and stabilize a large-scale operating system migration, recovering timeline confidence on a program at risk.
• •After seven months, Kroger leadership hired me full time.

• Systems engineering
• Infrastructure
• Automation
• Windows
• Mac

• •I ran level 1 through level 3 support across a mixed-OS environment in a lean organization, and the project work alongside it is where I built my engineering foundation.
• •I helped deploy and standardize SIEM and anti-malware tooling with always-on proxy controls that persisted off the corporate network, reducing endpoint risk and creating security reporting the company did not have.
• •I assisted the AirWatch (now Workspace ONE) rollout that replaced the BlackBerry fleet company-wide.
• •I authored incident response protocols and standard operating procedures used for threat mitigation.

• Endpoint security
• SIEM
• Anti-malware
• Incident response
• AirWatch
• Customer support

• •I directed end-to-end modernization of company IT across servers, networks, CRM and ERP for a 30-person business, acting as the entire technology function.

• Windows
• Server management
• Networking
• ERP
• CRM
• SMB

I co-founded and bootstrapped a 501(c)(3) from concept to operating organization: a regional cybersecurity institution dedicated to developing the next generation of security talent.

• •As one of three co-founders, I helped build it from an idea: bringing the founders together, filing the non-profit incorporation and leading the grassroots effort to get off the ground.
• •I direct strategy, logistics and execution for Queen City Con, which grew from a handful of virtual volunteers during COVID to 300 attendees at the first in-person event in 2023 and 600+ in 2025.
• •I help host its Wellness Village, which encourages work-life balance and building the skills to stay healthy at work.
• •I hold fiduciary responsibility for the organization’s finances, sponsorship revenue and nonprofit compliance as VP of Treasury on the board of directors.
• •I’ve spoken at Queen City Con across multiple years, most recently on the future of identity in the enterprise and decentralized digital identity.

• 501(c)(3)
• Non-profit
• Board
• Treasury
• Conference
• Community