CorpSec Identity Engineering

Identity Engineering owns the architecture, security controls, and provisioning automation behind identity and access management at GitLab, including Okta system management and authentication, automated access request flows through Lumos, joiner/mover/leaver provisioning, service accounts, and cloud IAM.

Identity Engineering owns the architecture, security controls, and provisioning automation behind identity and access management at GitLab.

Corporate IT / End User Services handles requests and enablement — ad-hoc access requests, access builds for temporary service providers and external collaborators, account resets, and end user support.

What We Own

  1. Okta system management and Okta authentication
  2. Automated access request flows through Lumos (Identity Governance)
  3. Provisioning architecture and orchestration
  4. Onboarding and offboarding automation and overall design
  5. Role change (career mobility) provisioning
  6. Service Accounts
  7. ABAC and RBAC, AuthN and AuthZ policies, role entitlements
  8. Cloud IAM for AWS, Azure, and Google Cloud
  9. Sandbox Cloud

See CorpSec Engineering for the full system owner table.

Last modified July 28, 2026: Retire defunct CorpSec functions and realign Corporate IT documentation (8f22e33f)
View page source - Edit this page - please contribute. Creative Commons License