CorpSec Devices
CorpSec Devices owns GitLab's endpoint security control plane.
CorpSec Engineering
The Engineering team members are organized functionally based on the category of tech stack applications that we manage.
CorpSec owns identity and access management (IAM) for AWS, Azure, and Google Cloud. Cloud resource administration is owned by Infrastructure Security and the Infrastructure Platforms (SRE) teams.
System Owners
| Functional Team | Systems | Managers | Engineers |
|---|---|---|---|
| CorpSec Devices |
DriveStrike Google Chrome Jamf MDM Mobile Devices NordLayer VPN Okta Verify SentinelOne EDR Software Updates YubiKey |
EM Lenny Vaknine
|
Nathaniel Strauss Peter Hansen Steve Sagan |
|
Identity Engineering Related Sandbox Cloud |
1Password ABAC and RBAC AuthN and AuthZ Policies AWS IAM Azure IAM GitLab.com IAM Policies Google Cloud IAM Google Workspace Identity Governance (IGA) No Code Automation Okta Applications Okta Groups Okta Users Okta Workflows Onboarding Offboarding Role Entitlements Sandbox Cloud Service Accounts Slack |
EM David Zhu |
Andrew Rishwain Erik Lentz Jacob Waters Jenny Wong Madison Spry Steve Ladgrove Vlad Stoianovici |
CorpSec Identity Engineering
Identity Engineering owns the architecture, security controls, and provisioning automation behind identity and access management at GitLab, including Okta system management and authentication, automated access request flows through Lumos, joiner/mover/leaver provisioning, service accounts, and cloud IAM.
Last modified August 13, 2026: Update CorpSec team member references (
11d8e858)
