Home
News
Tech Grid
Interviews
Anecdotes
Think Stack
Press Releases
Articles
  • Enterprise Solutions

Smallstep Expands Leadership Team with Geoff Leonard as CRO and Josh Drake as CTO


Smallstep Expands Leadership Team with Geoff Leonard as CRO and Josh Drake as CTO
  • by: PR Newswire
  • |
  • July 17, 2025

Smallstep, a San Francisco-based Device Identity Platform, announced on July 16, 2025, the expansion of its executive leadership team to support its growth and strategic initiatives. Geoff Leonard joins as Chief Revenue Officer (CRO), and Josh Drake has been promoted to Chief Technology Officer (CTO), reinforcing Smallstep’s focus on scaling its certificate-based access solutions for modern enterprises.

Quick Intel

  • Announced July 16, 2025, in San Francisco.

  • Geoff Leonard appointed CRO, bringing 20+ years in cybersecurity and SaaS.

  • Josh Drake promoted to CTO, leveraging expertise from Minted and Smallstep.

  • Aligns with rising demand for Zero Trust, certificate-based access solutions.

  • Smallstep named Top 10 Finalist in RSA Conference 2025 Innovation Sandbox.

  • Sponsoring Black Hat USA 2025 to showcase device identity use cases.

Leadership to Drive Growth

Geoff Leonard, the new CRO, brings over 20 years of experience scaling revenue and building global sales teams in cybersecurity and enterprise SaaS. His career includes key roles at Social Mobile (CRO), Clevertap (GM of North America), Leanplum, and Google, where he contributed to the 2014 acquisition of Divide. At Smallstep, Leonard will lead global sales, customer success, and strategic partnerships to accelerate market adoption.

Josh Drake, promoted to CTO after joining Smallstep in 2022, has driven engineering excellence with his expertise in scalable systems and software optimization, honed during a seven-year tenure at Minted. He will advance Smallstep’s platform innovation, technical strategy, and engineering execution. “Geoff and Josh’s depth of expertise and strategic vision are unparalleled,” said Mike Malone, CEO and Founder of Smallstep, emphasizing their role in scaling global presence and innovation.

Smallstep’s Zero Trust Innovation

Smallstep’s platform replaces static credentials with hardware-attested, device-bound certificates, enabling secure, automated, and user-friendly Zero Trust access for infrastructure, Wi-Fi, SSH, and SaaS applications. Its proprietary technology issues short-lived credentials based on cryptographic proof of device trust, addressing vulnerabilities in traditional SCEP-based authorization. Named a Top 10 Finalist in the RSA Conference 2025 Innovation Sandbox, Smallstep is recognized for its leadership in device-level Zero Trust security.

Market Momentum and Engagement

The leadership expansion aligns with growing enterprise demand for secure access solutions, as organizations shift to cryptographic, device-bound certificates. Smallstep is sponsoring Black Hat USA 2025 (booth #5627) to showcase real-world use cases for device identity. Social sentiment on X reflects enthusiasm, with posts highlighting Smallstep’s strategic hires as a catalyst for growth in the cybersecurity market, per @CIOInfluence.

Industry Context

The global Zero Trust security market is projected to reach $66.7 billion by 2028, growing at a 17% CAGR, per MarketsandMarkets, driven by rising cyber threats and remote work. Smallstep’s focus on certificate-based access positions it to capture this demand, though some note challenges in integrating Zero Trust with legacy systems. The company’s leadership changes and RSA recognition signal strong momentum in addressing these needs.

Smallstep’s appointment of Geoff Leonard and promotion of Josh Drake underscore its commitment to scaling innovation and market presence. By enhancing its Device Identity Platform, Smallstep is poised to lead the enterprise shift toward secure, Zero Trust access solutions.

 

About Smallstep

Smallstep is the world’s first Device Identity Platform™, enabling Zero Trust, certificate-based access to infrastructure, applications, and networks. Built in partnership with Apple and Google, Smallstep uses cryptographic attestation and short-lived, hardware-backed credentials to replace passwords, SSH keys, and VPN clients. By integrating with tools like Jamf, Intune, and Okta, Smallstep ensures that only trusted users on compliant devices can access sensitive systems—delivering true Zero Trust security without user friction.

News Disclaimer
  • Share