Identity at the Center

#376 - Understanding Device Identity in a Zero Trust Framework with Shea McGrew

Sep 29, 2025
Shea McGrew, CTO of Maricopa County, shares insights from her journey in IT, emphasizing the importance of curiosity and customer service. She dives into the concept of device identity within a Zero Trust framework, debating whether machines can have identities. Shea discusses the challenges of being a CTO, the rationale behind running a dedicated identity management program, and the role of certificates in establishing trust. The conversation also explores the future of device identity, including AI's potential impact and the significance of organizational change management.
Ask episode
AI Snips
Chapters
Transcript
Episode notes
ADVICE

Organize Identity Workstreams

  • Separate identity types (internal, external, device) and capability areas (identity management, access) to prioritize work.
  • Use focused streams so teams can progress in parallel without muddying responsibilities.
ADVICE

Explain Identity With Airport Analogies

  • Explain identity improvements in business terms using relatable analogies like airport security.
  • Tie identity work to pain points (password resets, user experience) to gain executive and HR buy-in.
INSIGHT

Zero Trust Fits Decentralized Orgs

  • Zero Trust suits decentralized organizations because semi-autonomous units need mutual verification to safely share resources.
  • ZTA gives a shared vocabulary and justification across diverse teams.
Get the Snipd Podcast app to discover more snips from this episode
Get the app