Identity at the Center

#376 - Understanding Device Identity in a Zero Trust Framework with Shea McGrew

Sep 29, 2025
Shea McGrew, CTO of Maricopa County, shares insights from her journey in IT, emphasizing the importance of curiosity and customer service. She dives into the concept of device identity within a Zero Trust framework, debating whether machines can have identities. Shea discusses the challenges of being a CTO, the rationale behind running a dedicated identity management program, and the role of certificates in establishing trust. The conversation also explores the future of device identity, including AI's potential impact and the significance of organizational change management.
Ask episode
AI Snips
Chapters
Transcript
Episode notes
INSIGHT

Device Identity Broadens 'Who' Has Identity

  • Device identity extends the concept of identity beyond humans to include machines as decision-influencing entities.
  • Hardware is becoming uniquely identifiable, so device identity matters for access and trust decisions.
ANECDOTE

From Help Desk To CTO

  • Shea traced her IT path from help desk to CTO, sparked by hands-on AD work during Sarbanes-Oxley time.
  • Early scripting and solving systemic problems taught her to lead with curiosity and ownership.
ADVICE

Organize Identity Workstreams

  • Separate identity types (internal, external, device) and capability areas (identity management, access) to prioritize work.
  • Use focused streams so teams can progress in parallel without muddying responsibilities.
Get the Snipd Podcast app to discover more snips from this episode
Get the app