Senior End User Computing Engineer. I take manual IT environments and turn them into automated, cloud-managed platforms — from Autopilot enrollment to runbook-driven remediation, at multi-thousand-endpoint scale.
Intune, Autopilot, Entra ID, Jamf. Zero-touch enrollment, compliance policy design, and lifecycle automation for Windows and macOS at scale.
Azure Automation, Power Automate, and Microsoft Graph. Building the systems that fix things without a ticket ever being opened.
Self-service catalogs, approval flows, and internal apps that replace ticket queues with buttons employees can press themselves.
Docker, DNS, Tailscale, reverse proxies, Azure Automation. If it runs on Linux or in Azure, I've probably broken and rebuilt it in my own lab.
Replaced a ticket-driven software request process with a SharePoint-native React catalog. Employees browse titles, request installs, and license groups auto-assign on approval. Tenant-agnostic and portable across sites.
An Azure Automation runbook wired to a SharePoint flags list. Two-pass architecture: trigger on-demand Intune remediations at scale, then harvest results. Fleet-level self-healing without human-in-the-loop.
A live Microsoft 365 tenant I own end-to-end — Entra ID P1, Intune, SharePoint, Exchange, and Azure — where I prototype and validate new configurations, PowerShell automation, and Intune policies before they touch production. Also serves as a sandbox for peers and adjacent teams to safely build hands-on skills.
Stood up cloud endpoint management from scratch across 4,500 devices. Autopilot enrollment, EAP-TLS certificate Wi-Fi via ADCS, and macOS zero-touch via Jamf. Migrated legacy SCCM-packaged apps into Intune and packaged 400+ new Win32 applications myself, establishing repeatable standards for detection rules, silent installers, and deployment rings.
Owned the full EUC surface end-to-end — endpoint platforms, SharePoint administration, and a broad application portfolio — while leading the EUC team and running on-demand training sessions to level up peers and adjacent teams.
A React SPFx web part rendering an IT service catalog with drill-down tiles, status alerts, and quick links. Config-driven from five SharePoint lists — no HTML edits to change what the catalog shows.
A running lab across five hosts: Dell R720xd, Synology NAS, Raspberry Pi 5, and a workstation with local LLM inference. Pi-hole, Nginx Proxy Manager, Tailscale, WoL proxy, Open WebUI, self-hosted ARK cluster. The place I try things before I try them at work.
I'm open to Principal Cloud / EUC Architect conversations, and to work at organizations building things that matter — infrastructure, security, or the mission itself.