Available · Director / Sr. Manager / Staff IC · Corporate Engineering
Zach Amato

Building the AI-native Corporate Engineering function.

Identity-first internal systems, lean team automation, and governed AI applied where it actually pays off. Paved roads, not walls. AI sits on top of the foundation, not in place of it.

0audit findings, multi-year SOC 2140+SaaS apps under identity governance1,000+employees supported$15M+ARR enabled via security & trust
zsh, corp-eng
~/ whoami
corporate_engineering_leader
~/ tail -f /var/log/now
>
// What I actually do

I run Corporate Engineering as a product team. Identity, endpoint, SaaS governance, and compliance are the foundation. Automation is how a small team keeps up. AI sits on top of that, useful where the controls underneath are real, dangerous where they aren't.

What that looks like in practice: identity lifecycle automation, endpoint and device management, SaaS governance, access reviews, trust-center and customer assurance ops, and AI-assisted internal workflows.

// Core tenets

How I think about modern IT.

IT is a product, not a process

I treat employees as users, not tickets. Internal systems get the same care as customer-facing ones: roadmaps, design, integration, and a paved-road experience that's easier than going around it.

Security enables, it doesn't block

Strong identity, GRC, and corp security are the reason teams can move fast. I meet teams where they are, build the safe path, and never make IT or Security the scary department.

Automation and AI are leverage

Workflow automation, governed AI, and agentic patterns are how a small Corp Eng team scales. They're a tool to amplify the operating model, not the identity of the team.

Empathy is the operating system

Every ticket is a person who is stuck, often on something that matters to them. I lead IT and Security as a customer-service function. AI handles the repetitive layer so the team has the time and attention to show up as humans on the moments that actually need one. Frustration is a signal I owe a real answer to, not a canned response.

// Manager README

How I work.

The operating manual I'd hand a new direct report on day one. No surprises, no guessing, no hidden rules.

I share the why behind business decisions so engineers can build the how. Context isn't a leadership privilege, it's the input that makes good engineering possible.

15+
Years building Corporate IT
1000+
Employees supported at scale
140+
SaaS apps under identity governance
$15M+
ARR enabled via security & trust
40%
Inbound security requests removed
0
Audit findings, multi-year SOC 2

// Operating stack

25 tools in active rotation
OktaIdentity
OktaAutomation
SCIMIdentity
WorkdayHRIS
Google WorkspaceProductivity
SlackCollab
AtlassianCollab
NotionKnowledge
SalesforceGTM
JamfEndpoint
IntuneEndpoint
ABM / DEPEndpoint
ChatGPT EnterpriseAI
ClaudeAI
GeminiAI
CredalAI Gateway
GleanAI Search
MCP ConnectorsAI Integration
ZapierWorkflows
PythonCode
TerraformIaC
VantaCompliance
OneTrustPrivacy
AbnormalSecurity
SentinelOneSecurity
OktaIdentity
OktaAutomation
SCIMIdentity
WorkdayHRIS
Google WorkspaceProductivity
SlackCollab
AtlassianCollab
NotionKnowledge
SalesforceGTM
JamfEndpoint
IntuneEndpoint
ABM / DEPEndpoint
ChatGPT EnterpriseAI
ClaudeAI
GeminiAI
CredalAI Gateway
GleanAI Search
MCP ConnectorsAI Integration
ZapierWorkflows
PythonCode
TerraformIaC
VantaCompliance
OneTrustPrivacy
AbnormalSecurity
SentinelOneSecurity

// What I've actually shipped

Receipts, not benchmarks.

Real numbers from real programs. The aspirational benchmarks I build toward, zero-touch resolution, helpdesk efficiency ratios, cost per resolution, live in the Playbook.

See operating targets
Audit Findings
0
Multi-year SOC 2 Type II

Zero findings across SOC 2 Type II, Microsoft DPR, TruSight, and EU-US DPF. Continuous evidence collection via Vanta + Okta + MDM, not a quarterly fire drill.

ARR Enabled
$15M+
Trust infrastructure at Litmus

Architected the trust posture and security review motion that unblocked enterprise deals. Inbound customer security reviews dropped 40% via trust.litmus.com.

SaaS Apps Governed
140+
Identity-first lifecycle

Okta + SCIM lifecycle across 140+ apps supporting 1,000+ employees. Zero-touch provisioning, automated deprovisioning, full audit trail.

Building the team that runs the next iteration of IT?

I'm looking for senior Corporate Engineering and IT leadership roles where IT is treated like a product, security and GRC are built in, and AI is part of the operating model.