Built by the engineer who lived this problem for 14 years.
I’m Raanan Peretz. I’ve run IT for a hospital, for Israel’s largest healthcare provider, for a hundred-person startup, and for a global tech company — and the same thing broke in every one of them: getting a new hire their accounts on day one, and pulling every last one of them the day they leave. Zonitix is that job, automated, on a private instance we host for you.
- 01
A hospital
- 02
Israel’s largest healthcare provider
- 03
A hundred-person startup
- 04
A global tech company
The short version
14 years, one recurring failure. It started in a hospital, where the stakes were clinical systems nobody could afford to be locked out of. Then 25,000 endpoints across Israel’s largest healthcare provider. Then a hundred-person startup, where I was the IT department. Then a global tech company — four regions migrated to AWS, while holding SOX, HITRUST and ISO 9001. Different scale every time, and the same broken process every time.
Joiner, mover, leaver. Every place I worked ran it on tickets, spreadsheets and someone remembering. That holds right up until it doesn’t: a new hire idle for three days because two of their accounts never got created, or someone who left months ago whose access nobody pulled — found not by the security team, but by an auditor.
Companies with engineers to spare build their way out of this. Everyone else absorbs the risk, and faces the identical audit with none of the budget. I’ve been on both sides of that — the company with a team, and the company where I was the team. Zonitix is that same capability, packaged so a small IT team — or one person wearing the IT hat — can actually run it, on a dedicated instance we host and monitor, for a price per instance rather than a fee per employee.
The background
Sr. Manager, IT Engineering @ LivePerson
- Lead a team of five IT engineers across global regions.
- Migrated four global on-premise data centers to AWS — lift-and-shift for critical workloads, greenfield re-architecture on internally built Terraform modules.
- Replaced legacy Citrix across three regions with AWS AppStream and WorkSpaces, fully automated in Terraform.
- Designed the zero-trust network access solution that replaced Pulse VPN, and moved 550 Google- and SCCM-managed devices onto Intune.
- Partnered with Compliance and Audit on SOX, HITRUST and ISO 9001.
Head of IT @ Source Defense
- Owned every part of IT for a ~100-user startup — on-premise, Azure, AWS, Jamf, and the Fortinet network and security stack.
- Migrated on-premise Active Directory to Azure AD and rolled out Intune.
- Held ISO 9001 working directly with auditors, and ran the IT budget and vendor relationships.
Systems Specialist @ LivePerson
- Ran the SCCM and Jamf Pro infrastructure, delivering global Windows and macOS deployments.
- Migrated on-premise Jamf Pro servers to Jamf SaaS.
- Integrated IT workflows across the G Suite, Slack, UltiPro, Jamf and ServiceNow APIs — and learned how much engineering it takes to make joiner–mover–leaver reliable.
System Administrator @ Clalit Health Services
- Ran a 25,000-endpoint / 1,000-server estate for Israel's largest healthcare provider.
- Designed the SCCM infrastructure and automated OS deployment and patching (OSD, PowerShell, GPO).
Computing Infrastructure Team Leader, Kaplan Hospital @ Clalit Health Services
- Ran mission-critical hospital IT — Cisco networking, network access control, servers and endpoints.
- Built the service-desk processes and SLA framework, and owned the IT budget and inventory.
Jamf 300 (2019) & Jamf 200 (2018) · Microsoft OS Troubleshooting, Vital Signs (2016) · RHCSA + RHCE, Red Hat Certified via John Bryce (2012)
Systems I’ve run in production
Zonitix provisions and revokes access across Okta, Microsoft Entra, Google Workspace, Slack and AWS IAM. Those aren’t integrations written from a vendor spec — they’re systems I’ve operated, migrated and been audited on.
Identity & directory
Active Directory · Azure AD / Entra · Okta · Google Workspace
Devices & endpoints
Jamf · Intune · SCCM · OSD / WDS · GPO
Cloud & infrastructure
AWS (EC2, VPC, AppStream, WorkSpaces) · Terraform · Jenkins · VMware
Network & security
Zero-Trust · Fortinet · Cisco · Forescout · Portnox
Automation & operations
PowerShell · Python · ServiceNow · Commvault · SolarWinds
Compliance
SOX · HITRUST · ISO 9001 — held, with auditors
“You’re one person. What if you disappear?”
A fair question, and the honest answer isn’t a promise — it’s how the product is built. Nothing about your data depends on Zonitix still being here.
The full posture — sub-processors, isolation, what we can and cannot see — is written out in the Trust Center.
- 1
Your data is never pooled
Your data lives on your own single-tenant instance — never pooled with another customer, never in a shared Zonitix database, and backed up to a bucket you own. (The one shared service is Apple MDM, and only if you use it; the Trust Center says exactly what it holds.)
- 2
Backups go to your cloud account
Database snapshots upload to a bucket or container you own and control — S3-compatible storage or Azure Blob Storage. We hold no copy of them.
- 3
You can recover without us
The offline recovery kit and backup decryptor are published publicly with their SHA-256 hashes. If Zonitix vanished tomorrow, your data would still open.
You talk to the person who builds it.
You get the engineer who wrote the thing, and a company obsessed with one problem instead of upselling you ten. When you ask for something, the answer comes from the person who can actually build it.