From Tickets to Trust: How to Roll Out Just-in-Time Access without Slowing Down Engineers

Standing access is a time bomb—and yet, in most orgs, it’s still the default. Developers are over-permissioned just to avoid ticket delays. Access reviews live in spreadsheets. Security teams are buried in manual cleanup and audit prep. And the patchwork of point tools meant to help? They rarely scale—or align with how your teams actually work.

This session is for the teams who are asking: Is what we’re doing even working anymore?

We’ll walk through a practical, field-tested approach to implementing Just-in-Time (JIT) access—starting with what you already have, proving value with one team, and scaling without creating friction.

What Attendees Will Learn

Why bolt-on point tools and homegrown scripts often fall short—and what modern JIT really looks like
How to roll out JIT access without boiling the ocean or ripping out existing workflows
What metrics matter (MTTA, request coverage, policy granularity) and how to track progress
How to apply least-privilege principles to both human and machine identities—including CI/CD and service accounts
What to look for in a JIT access solution if you need to pass audits for SOC 2, ISO 27001, or other frameworks
Why two teams replaced brittle approval flows with scoped, time-bound access—and how they did it

Who Should Attend

CISOs
VPs of Security
Security Architects
Security Engineers
DevSecOps Engineers
Platform Engineers
Staff Software Engineers
Infrastructure Engineers
IT Managers
Directors of IT
Compliance Managers
SOC Analysts
Engineering Managers
Site Reliability Engineers
Cloud Security Architects
IAM Engineers
Heads of Compliance
CTOs

The Panelists

Geoff Harcourt

Chief Technology Officer | CommonLit

Geoff Harcourt leads engineering at CommonLit, a 501c3 non-profit organization that builds a rigorous literacy curriculum for students in grades 2-12. Under Geoff’s tenure CommonLit has grown from 1 million to 47 million student users. CommonLit’s small but mighty engineering team manages to deliver new features to improve the program’s amazing results in literacy skill growth on a rapid cadence while maintaining a strong security and compliance posture.