I manage enterprise Apple and Windows fleets with Jamf Pro and Microsoft Intune — 1,000+ endpoints provisioned zero-touch, patched, compliant, and secure.
I'm a Senior Endpoint Administrator based in Irvine, California, with 10+ years of experience running enterprise device fleets. My specialty is the two platforms that power modern U.S. enterprises: Jamf Pro for the Apple ecosystem and Microsoft Intune for Windows and mobile.
I own the full device lifecycle end to end — from onboarding to secure offboarding. That means zero-touch enrollment through Apple Business Manager (ADE + VPP) and Windows Autopilot, configuration profiles and compliance policies aligned with CIS benchmarks, app packaging and deployment (PKG/DMG and Win32), OS update and patch governance, and Conditional Access enforcement through Microsoft Entra ID.
My approach is simple: automate everything repeatable, and document everything else. If a task has to be done on more than a handful of devices, it becomes a PowerShell or Bash script, an Intune remediation, or a Jamf policy — never a manual checklist. That mindset is how one engineer keeps a 1,000+ device fleet consistent, compliant, and audit-ready, and it's how I cut manual device setup time by roughly 40% at enterprise scale.
I've built my career in environments where endpoint management genuinely matters: a regulated U.S. fintech, where compliance policies and security baselines had to satisfy auditors as well as users, and a global consumer brand running hybrid corporate and manufacturing floors. That background taught me to treat endpoint security as something that protects people while they work — not something that gets in their way.
I back the hands-on experience with 40+ industry certifications — including Jamf Certified Associate (Jamf Pro, Jamf Protect, and Jamf School), Jamf Command Line Innovator, Google Professional Chrome Enterprise Administrator, and CompTIA A+ — all verifiable on Credly, and I keep them current because this field doesn't stand still.
As a U.S. citizen eligible for security clearance, I partner with organizations across finance, manufacturing, defense, and government. And if your team happens to be multilingual — I speak English, Persian, Azerbaijani, and Turkish.
Deep specialization in the two MDM platforms that run enterprise fleets.
Enterprise macOS and iOS/iPadOS management — policies, Smart Groups, extension attributes, configuration profiles, Self Service, patch management, and Automated Device Enrollment with Apple Business Manager and VPP.
Windows and mobile device management — Autopilot provisioning, compliance policies, security baselines, Win32 app packaging and Company Portal deployment, update rings, proactive remediations, and Endpoint Analytics.
Ship-to-user deployment with Windows Autopilot and Apple Automated Device Enrollment — devices arrive ready to work, cutting manual setup time by 40% across 1,000+ endpoints.
FileVault and BitLocker encryption enforcement, CIS-aligned security baselines, compliance policies with Conditional Access, structured OS update rings, and audit-ready reporting across both platforms.
Notes from the field on Jamf Pro, Microsoft Intune, and enterprise deployment. View all articles →
How to build reliable macOS patch management in Jamf Pro — a written patch standard, Smart Groups that continuously target drift, managed deferrals with…
Read article →A field-tested Windows Autopilot checklist — deployment profiles, Enrollment Status Page tuning, Win32 app packaging, update rings, and the pitfalls that break zero-touch provisioning…
Read article →Connect Jamf Pro device compliance to Microsoft Intune and Entra ID so your Macs are governed by the same Conditional Access policies as Windows…
Read article →Open to senior endpoint roles and consulting engagements — let's talk about your fleet.