> exactly how security and compliance

Not everywhere. I go out of my way to assist teams to achieve a secure outcome with less effort.

Things like: “instead of admin access to the production servers the devs can have fully automated deployment pipelines combined with OpenTelemetry for observability so they don’t have to spend half the day scrolling through gigabytes of logs.”

That’s more secure and and more better.

Nobody had to be told “no”.

Similarly, I replace key store access with secret-less managed identity, etc.