Microsoft endpoint engineering
Intune MDMAutopilot OOBECompliance policiesDevice lifecycle
IT Engineering | Microsoft | Infrastructure
IT engineering for systems that need to work.
I work across Microsoft 365, Entra ID, Intune, Defender for Endpoint, Windows/Linux servers, VPN paths, networks, endpoints and field technology with an engineering mindset: understand the problem, design a clear path, implement it properly and leave it documented.
systems.engineering
ACTIVEIntune
Endpoint solutions + administration
MDE
Company endpoint security
Network
Design + implementation
Servers
Service design + operations
MicrosoftM365 + Entra ID + Intune + Autopilot
SecurityDefender for Endpoint + compliance + baselines
NetworkPalo Alto GlobalProtect + DNS/DHCP + VLANs
SystemsWindows/Linux services + VMware/Hyper-V intermediate
AppsApplication troubleshooting + APIs + logs
SupportEnd-user OS + app + network support
IT Engineering Focus
Practical infrastructure work with design, ownership and problem solving.
I design practical IT processes that make systems easier to manage, troubleshoot, secure and hand off.
Endpoint security posture
Microsoft DefenderDevice riskSecurity baselinesHardening checks
Microsoft 365 operations
Entra ID usersGroups/licensesExchange/OutlookAdmin workflows
Servers and virtualization
Windows ServerLinux/systemdVMware/Hyper-VService checks
Networks and connectivity
Palo Alto VPNWindows VPNDNS/DHCPFirewall rules
Field technology systems
Laptop imagingIP cameras/NVROn-site checksVendor follow-up
Application troubleshooting
PostmanBurp SuiteAPIs/URLsLogs and errors
Database systems
SQL troubleshootingSchema designApp connectionsData validation
IT and application support
End-user supportOS issuesApp supportNetwork access
Design
Operational workflows that scale
Able to convert repeated IT problems into clearer workflows: Autopilot readiness checks, device handoff criteria, inventory tracking, escalation notes and standards that make the next fix faster.
Microsoft
Endpoint management and security
Hands-on direction around Intune, Autopilot, Microsoft Defender for Endpoint, Entra ID users/groups, compliance status, device lifecycle, access boundaries and Microsoft 365 administration.
Infrastructure
Servers, networks and services
Comfortable validating Windows/Linux services, OS behavior, DNS/DHCP, VLAN and subnet behavior, VPN paths with Palo Alto GlobalProtect, firewall rules, Wi-Fi/LAN connectivity, virtualization environments and the dependencies between endpoints, servers and network services.
Execution
Ownership from issue to fix
Strong fit for technical work that needs diagnosis, prioritization, documentation, stakeholder updates, vendor follow-up and clean closure; fast ramp-up into adjacent tools when the environment requires it.
Certifications and education
Formal learning backed by practical systems work.
Cloud, networking and software engineering foundations connected to real IT engineering, infrastructure and operational problem solving.
Completed
Oracle Cloud Infrastructure Foundations
Completed OCI infrastructure learning with cloud fundamentals, compute, networking, storage, identity and core Oracle Cloud concepts.
In progress
Cisco CCNA
Networking track in progress, focused on routing and switching fundamentals, subnetting, VLANs, network services, troubleshooting and secure connectivity design.
5 years completed
Software Engineering — ITSON
Completed five years of software engineering studies at ITSON, building foundations in programming, databases, software architecture, systems thinking, networks and technical problem solving.
Recent project work
Some of the latest systems I have worked on.
A selected set of recent infrastructure, automation and operations projects, with more work available beyond what is shown here.
Endpoint lifecycle and compliance system
A project lane for Intune and Autopilot workflows: OOBE readiness, enrollment checks, compliance policies, Defender status, inventory visibility, handoff criteria and repeatable provisioning.
Open case studyTemporary access VPN with SoftEther SSTP
Short-term remote employee VPN path through an authorized corporate IP, built to support urgent client setup windows, meet SLAs and avoid onboarding delays.
Open case studyOn-site IT inventory security
Physical IT inventory control designed around security compliance: camera coverage, controlled access, equipment handling, rack organization, evidence, accountability and site-level operating discipline.
Open case studyHermes agentic automation infrastructure
Server-hosted agentic system for connecting business tools, automating reports, creating ticket workflows, managing IT assets and running controlled operations from a secure sandbox.
Open case studyContact
IT engineering with range, structure and follow-through.
Best fit for roles that need more than ticket handling: Microsoft endpoint engineering, Intune/Defender operations, network engineering, infrastructure design, field technology management and practical solution design.