Sarah is the Head of Product for Cedar Policy Language, an open-source project designed to express permissions in an easy-to-read and fast-to-execute format. She co-founded a professional organization for identity practitioners called IDPro. She is a contributor to NIST 800-63-C Digital Identity Guidelines and O'Reilly's "97 Things Every Cloud Engineer Should Know." She is an Identity 25 award recipient. She has spoken on information security at the RSA Conference, and keynoted Identiverse and Authenticate Conference. She has been quoted as an industry expert in The LA Times, Forbes, and Wired.