Resume

Endpoint Administrator

Architect the full macOS and iOS device lifecycle in Jamf Pro — PreStage enrollment, DEP/ABM, configuration profiles, Smart Groups, extension attributes, patch policies, and software deployment for 1,000+ Apple devices across hybrid corporate and manufacturing environments. Design and maintain Microsoft Intune Autopilot/OOBE deployment profiles, compliance policies, Win32/MSIX app packaging, Windows update rings, and app protection policies (MAM) for managed and unmanaged devices.

Architect and enforce Conditional Access in Entra ID — device-compliance requirements, MFA enforcement, app-based access controls, sign-in risk policies, and named-location restrictions. Develop PowerShell and Python automation against the Microsoft Graph API for device compliance reporting, user/group provisioning, bulk policy assignment, and offboarding — cutting manual provisioning time by roughly 40%. Build inventory and compliance dashboards tracking 1,000+ assets, patch status, and audit readiness, run automated secure-offboarding workflows (device wipe, Jamf/Intune unenrollment, Entra ID and Okta access revocation), and act as Tier 3 escalation for complex MDM, Conditional Access, and identity incidents.

System Administrator

Progressed through multiple IT roles to own enterprise endpoint engineering and security for 1,000+ macOS, Windows, iOS, and ChromeOS devices in a regulated FinTech environment. Owned full macOS/iOS fleet management in Jamf Pro, Jamf Protect, and Jamf Connect — zero-touch DEP enrollment, configuration profiles, patch automation, macOS threat prevention and behavioral analytics, and identity-integrated login with Entra ID / Okta.

Deployed 1,000+ Windows and macOS devices via Intune Autopilot/OOBE; designed compliance policies, Conditional Access rules, and app protection policies (MAM) for a hybrid Jamf + Intune environment aligned to SOC 2 requirements. Built PowerShell automation on the Microsoft Graph API for bulk device-compliance exports, automated access reviews, onboarding/offboarding, license assignment, and audit reporting. Administered Microsoft 365, Exchange Online, SharePoint, OneDrive, Entra ID, Okta, and Active Directory (IAM, RBAC, licensing, SOC 2 operations), managed Google Chrome Enterprise across both platforms, and mentored 5+ Service Desk technicians while authoring SOPs and onboarding guides.

Earlier IT career — system administration & desktop engineering

Progressive IT experience before specializing in endpoint management: system administration for 500+ Windows workstations, Active Directory and Group Policy, Windows Server domain services, virtualization and storage infrastructure, and multi-organization desktop support. This foundation is why endpoint problems rarely surprise me — I've usually seen the underlying cause somewhere before.