Elizabeth Waeni Mutisya
Hi, I'm Elizabeth.
I lead platform work that turns complexity into trust.
I'm a product leader specializing in platform governance and security. I turn complex identity policies, permissions, and authorization requirements into accountable systems that help developers move faster without bypassing governance.
From Developer to Product Leader
Elizabeth studied Informatics and Computer Science at Strathmore University and began building systems and websites at Uwezo Wetu College. Internships in Microsoft Authenticator and hybrid identity connected that engineering foundation with the security-sensitive experiences people and organizations rely on.
Since July 2023, she has worked as a Technical Product Manager across Microsoft Graph, OData, and Microsoft Services App Management and Governance. She defines authorization and identity policy models, coauthors contextual access architectures, and builds self-service governance workflows with engineering teams.
Her focus is governance that works in practice: fail-closed controls, clear ownership, staged rollouts, and telemetry that catches bypasses. Her agent-security work includes leading MCP Shield, a prototype for inspecting suspicious tool behavior.
Outside work, she's an adventurer at heart. Traveling across continents, hiking new trails, discovering cultures, and planning the next expedition.
Strathmore University
- BSc Informatics & Computer Science
- Final-year research in computational speech therapy analysis
Systems and Web Developer
- Uwezo Wetu College, part time
- Built college and foundation websites and a student grant system used by 500+ students
Product Manager Intern
- Microsoft Authenticator
- Owned strategy and delivery for in-product feedback on security-sensitive sign-in experiences
Software Engineering Intern
- Microsoft Hybrid Identity
- Supported enterprise identity modernization from on-premises infrastructure to Microsoft Entra
Technical Product Manager
- Microsoft Graph and OData
- Microsoft Services App Management and Governance
- Authorization architecture, identity policy, and self-service platform governance
Featured Projects
Technical Product Manager
Unifying Permissions & PreAuthorization Governance
Registration and permission governance relied on slow workflows and manual support, making it difficult for developers to move through onboarding.
What I Did
- Shipped a self-service governance platform for onboarding
- Redesigned registration and permission governance workflows
- Defined authorization and identity policy specifications with core engineering teams
Impact
Technical Product Manager
Modernizing Microsoft Graph Permissions Governance
Enterprise API governance needed consistent authorization decisions across permission risk, access types, applications, workloads, and cloud environments.
What I Did
- Architected authorization and identity policy models for enterprise API governance
- Coauthored a contextual authorization architecture across workload, permission risk, access type, application type, and cloud environment
- Defined fail-closed treatment for unclassified permissions, new APIs, missing ownership, and unexpected states
- Designed governance-bypass detection for application and permission changes with staged rollout and telemetry gates
Impact
Technical Product Manager
Scaling API Review Governance Across 158 Workloads
Large engineering organizations struggled to adopt a new API review process, risking fragmentation.
What I Did
- Launched an API and permission governance process across Microsoft Graph workloads
- Built self-service publishing and attestation automation
- Drove adoption of the governance process within SLA
Impact
What I Bring
The product leadership toolkit I use to bring clarity and accountability to enterprise platforms.
Discovery & Product Insights
02Platform Governance
03Security & Authorization
04Platforms & Tools
05Leadership & Safeguards
06Liz's Field Notes
Personal notes on platform governance, security, and the leadership decisions behind building at scale.
Clarity Is a Product Decision
Clarity is not a writing step at the end. It is the decision itself, written down where people can understand it, test it, and hold you to it.
The PM Work Between the Milestones
The roadmap records what got decided. The space between the milestones is where the real decisions, tradeoffs, and follow-through happen.
Why Most Companies Get Agent-to-Agent Permissioning Wrong
Agent access cannot be treated like a static human permission grant. The risk lives in the path an agent takes, not only in the goal it was given.
Life Beyond the Platform
When I'm not untangling platform challenges, you'll find me on a trail, at an airport, or somewhere between the two.
Ask me about navigating motorbikes in Vietnam, sunrise at the Pyramids, or getting lost in Istanbul's Grand Bazaar.
Kenya
Tanzania
Rwanda
Ghana
Egypt
Türkiye
United Kingdom
Vietnam

Cambodia
India
Indonesia
USA
Giving Back
A few ways I stay connected and contribute beyond work.
Nawiri Sisters Foundation
Digital Lead & Mentor
Mentoring girls in menstrual health, technology, and university preparation.
Microsoft Early in Profession Africa
Culture Pillar Lead
Growing community and connecting colleagues through mentorship.
Equals EU
Member
On the Map Project
Cairo, Egypt
Rethinking how African countries welcome each other, and sharing Egypt beyond mummies and pyramids.
Let Kids Play Project
Rwanda & Tanzania
Designing and building playgrounds for children.
Teaching Swahili
Language & culture
Sharing my mother tongue with learners across borders.
AI for Good
Community learning
Making AI and technology knowledge accessible to communities.
© 2026 Elizabeth Waeni Mutisya. Crafted with intention.