I manage enterprise Apple and Windows fleets with Jamf Pro and Microsoft Intune — 1,000+ endpoints provisioned zero-touch, patched, compliant, and secure.
I'm an Endpoint Administrator based in Irvine, California, with 10+ years of experience architecting, securing, and automating enterprise device fleets. My specialty is the two platforms that power modern U.S. enterprises: Jamf Pro (with Jamf Protect and Jamf Connect) for the Apple ecosystem and Microsoft Intune for Windows and mobile.
I own the full device lifecycle end to end — from onboarding to secure offboarding. That means zero-touch enrollment through Apple Business Manager (ADE + VPP) and Windows Autopilot, configuration profiles and compliance policies aligned with CIS benchmarks and SOC 2, app packaging and deployment (PKG/DMG and Win32), OS update and patch governance, and Conditional Access enforcement through Microsoft Entra ID — device compliance, MFA, app-based controls, and sign-in risk policies.
My approach is simple: automate everything repeatable, and document everything else. If a task has to be done on more than a handful of devices, it becomes a Microsoft Graph API script in PowerShell or Python, an Intune remediation, or a Jamf policy — never a manual checklist. That mindset is how one administrator keeps a 1,000+ device fleet consistent, compliant, and audit-ready, and it's how I cut manual provisioning time by roughly 40% at enterprise scale.
I've built my career in environments where endpoint management genuinely matters: a regulated U.S. fintech, where compliance policies and security baselines had to satisfy auditors as well as users, and a global consumer brand running hybrid corporate and manufacturing floors. That background taught me to treat endpoint security as something that protects people while they work — not something that gets in their way.
I back the hands-on experience with 40+ industry certifications — including Jamf Certified Associate (Jamf Pro, Jamf Protect, and Jamf School), Jamf Command Line Innovator, Google Professional Chrome Enterprise Administrator, and CompTIA A+ — all verifiable on Credly, and I keep them current because this field doesn't stand still.
As a U.S. citizen eligible for security clearance, I partner with organizations across finance, manufacturing, defense, and government. And if your team happens to be multilingual — I speak English, Persian, Azerbaijani, and Turkish. More about me →
Deep specialization in the two MDM platforms that run enterprise fleets.
Enterprise macOS and iOS/iPadOS management — policies, Smart Groups, extension attributes, configuration profiles, Self Service, patch management, and Automated Device Enrollment with Apple Business Manager and VPP.
Windows and mobile device management — Autopilot provisioning, compliance policies, security baselines, Win32 app packaging and Company Portal deployment, update rings, proactive remediations, and Endpoint Analytics.
Ship-to-user deployment with Windows Autopilot and Apple Automated Device Enrollment — devices arrive ready to work, cutting manual setup time by 40% across 1,000+ endpoints.
FileVault and BitLocker encryption enforcement, CIS-aligned security baselines, compliance policies with Conditional Access, structured OS update rings, and audit-ready reporting across both platforms.
Notes from the field on Jamf Pro, Microsoft Intune, and enterprise deployment. View all articles →
Microsoft confirms KB5124008 (September 2026) can break Remote Desktop Services -- RDP connections fail after several minutes, no permanent fix yet. What to check…
Read article →How to wire an external threat detection endpoint into a Copilot Studio agent so every runtime tool call gets an allow/block decision - Entra…
Read article →How to enforce a macOS screen lock fleet-wide with Microsoft Intune Settings Catalog — the two settings that matter, assignment to a device group,…
Read article →Open to senior endpoint roles and consulting engagements — let's talk about your fleet.