Pomelo uses JumpCloud to manage devices, identities & access for its globally distributed team

Challenge: Designing World-Class IT Infrastructure from the Ground Up

As Pomelo's Cybersecurity Technical Lead, Ezequiel Virun was tasked with designing a secure, world-class system for identity and access management (IAM), incident response, and data protection—a difficult feat when overseeing a team that is entirely remote.

Based on his positive prior experience with the platform, Virun determined that JumpCloud was the ideal solution. In his previous role, he found it was the only solution available at the time that could unify both Windows and macOS device management with Single Sign-On (SSO) integration via a Google Workspace account.

“It was the perfect choice, and the implementation went very well with zero touch.”
— Ezequiel Virun, Cybersecurity Technical Lead, Pomelo

Key Benefits and Outcomes with JumpCloud

1. Enhanced Security and Compliance

With JumpCloud, Pomelo has been able to strengthen security for its internal customers while achieving and maintaining PCI compliance—critical for a payments processor. They also implemented a zero-trust framework with conditional access policies, adding a vital security layer.

2. Streamlined Onboarding and Offboarding

By connecting JumpCloud to its Human Resources Information System (HRIS), Pomelo has automated user lifecycle management. When user lifecycles begin or end, access is granted or revoked to resources automatically.

“Going through and manually adding and removing users is a thing of the past,” Virun explains.

3. Frictionless Access via Passwordless Authentication

Pomelo utilizes JumpCloud Go, enabling passwordless authentication to all JumpCloud-protected devices and applications. This allows employees to access resources without friction.

“Employees can go through all of our apps and security layers with biometric authentication. It's a great user experience,” says Virun.

4. Automation with the JumpCloud API (Just-in-Time Permissions)

Pomelo leverages the JumpCloud API to build custom workflows that automate permissions, significantly reducing the risk of unauthorized access:

• Their engineering team built a workflow that starts in Slack, which then uses the API to provide just-in-time permission to their AWS productivity platform.
• They also built an automation that enables users to obtain root permissions on their device (for installing software) only when needed.

“Pomelo users trigger the workflow and JumpCloud does the magic,” Virun says.

This design highlights the flow of their automated permission granting process, minimizing standing access.

Future Plans

Virun is excited about JumpCloud's acquisition of Resmo, planning to test the asset management software to detect potential shadow IT applications not controlled by Pomelo, thus preventing data leakage.