Identity Engineering Team

The Identity Engineering team leads the technical strategy and automation implementation of identity and access management (IAM), role-based access control (RBAC), and administrative access controls for internal GitLab systems, cloud infrastructure, and tech stack applications. The Security team focuses on customer and product trust, while the Business Technology and IT team focuses on compliance and financial trust.

Overview

The Security Identity Engineering team was formed on 2023-12-01 to lead the design and implementation of our next-generation of identity and access management framework and program at GitLab that we refer to as Identity v3. The founding members of the team joined Security from the IT Engineering and IT Infrastructure team as part of an organization realignment, however have been working on identity management projects for several years.

To get started with understanding the Identity function, see the Identity handbook page. Our flagship project is the Identity Platform, powered by Access Control (accessctl) and Access Check (accesschk).

The team is just getting started, so please see the Identity Engineering Issue Tracker to learn more about what we’re working on.

Looking for IT Infrastructure? Please create an issue in the Identity Ops Issue Tracker or ask in Slack #security-identity-ops.

Looking to get access to something? Please open an access request using the appropriate issue template.

Quick Reference

Contact Us

  • (Preferred) Ask in #security-identity-ops
  • Tag us in an existing issue with @gitlab-com/gl-security/identity/ops
  • Tag us in an existing Slack thread with @security-identity
  • Create an issue in Identity Ops Issue Tracker
  • Confidential? Send a Slack DM to one of the team members.

On Call Schedule (Slack DM)

  • Use Slack DM on weekdays. Use PagerDuty on weekends.
  • 00:00 to 03:00 UTC - Jeff Martin
  • 03:00 to 07:00 UTC - No Coverage (contact SIRT)
  • 07:00 to 15:00 UTC - Vlad Stoianovici
  • 15:00 to 17:00 UTC - Jeff Martin / Vlad Stoianovici (sunset handoff)
  • 17:00 to 23:59 UTC - Jeff Martin

Epics and Issues

Data Sources

Projects and Source Code

Team Directory

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

smanzuik:
  name: 'Steve Manzuik'
  pronunciation: 'man-zoo-ick'
  title: 'director_threat_vulnerability_management'
  email_handle: 'smanzuik'
  gitlab_saas_handle: 'smanzuik'
  timezone: 'US Pacific (UTC-8 Winter/UTC-7 Summer)'
  working_hours:
    pt: '7:00am to 4:00pm'
    utc_winter: '15:00 to 23:59'
    utc_summer: '16:00 to 00:59'
  on_call_hours: null
  links:
    gitlab_saas_profile: 'https://gitlab.com/smanzuik'
jmartin:
  name: 'Jeff Martin'
  pronuncation: 'bat-man'
  title: 'staff_security_engineer'
  email_handle: 'jmartin'
  gitlab_saas_handle: 'jeffersonmartin'
  timezone: 'US Pacific (UTC-8 Winter/UTC-7 Summer)'
  working_hours:
    pt: '7:00am to 4:00pm'
    utc_winter: '15:00 to 23:59'
    utc_summer: '16:00 to 00:59'
  on_call_hours:
    pt: '5:00am to 7:00pm'
    utc_winter: '12:00 to 03:00'
    utc_summer: '13:00 to 04:00'
  links:
    gitlab_saas_profile: 'https://gitlab.com/jeffersonmartin'
vstoianovici:
  name: 'Vlad Stoianovici'
  pronunciation: 'stoy-on-oh-vitch'
  title: 'senior_security_engineer'
  email_handle: 'vstoianovici'
  gitlab_saas_handle: 'vlad'
  timezone: 'Eastern Europe (UTC+2 Winter/UTC+3 Summer)'
  working_hours:
    eet: '9:00am to 7:00pm'
    utc_winter: '07:00 to 17:00'
    utc_summer: '08:00 to 18:00'
  on_call_hours:
    eet: '9:00am to 7:00pm'
    utc_winter: '07:00 to 17:00'
    utc_summer: '08:00 to 18:00'
  links:
    gitlab_saas_profile: 'https://gitlab.com/vlad'
Last modified January 17, 2024: Add Security Identity Engineering team handbook page (5752bfc0)
View page source - Edit this page - please contribute. Creative Commons License