IT Systems Engineer
specializing in identity and access management, endpoint administration, and SaaS infrastructure within high-growth technology environments.
Experienced working across a wide range of IT platforms including Jamf, Microsoft Entra, Okta, Intune, and Jira, with 8+ years supporting enterprise IT environments. Proven track record of driving IT improvements and building automation to streamline operations, enhance reliability, and improve user experience.
What I deliver for modern IT teams
Identity & Access
Okta SME for SSO, lifecycle management, and SCIM provisioning at Infoblox. Microsoft Entra conditional access, RBAC, dynamic groups, and PIM at Ontinue – two environments, same commitment to clean access governance.
Automation & AI
Workflow automation across Okta, Jira, and Jamf – cutting onboarding time by 80%, reducing admin overhead by 35%, and replacing manual provisioning with logic that runs without tickets.
Endpoint Experience
Jamf and Intune across 2,800+ endpoints raising compliance from 82% to 98%. Built zero-touch macOS onboarding with Platform SSO, branded assets, and 14-day patch enforcement – reducing IT support involvement by 80%.
Networking & Collaboration
Deployed Teams and Zoom conference room systems across US and Canada offices, maintaining 99% uptime – with Cisco Meraki administration and secure collaboration environments keeping hybrid teams connected.
Skills
Comfortable leading across identity, endpoint, automation, and network layers with modern SaaS tooling.
Experience highlights
Raised endpoint compliance from 82% to 98% across 2,800+ endpoints including a dedicated Federal Jamf tenant
Administered global MDM infrastructure using Intune and Jamf at Infoblox, building policy baselines and standardizing endpoint governance across a worldwide fleet. Managed a separate Federal Jamf tenant and personally deployed Federal provisioned Macs to users, maintaining compliance with DoD requirements across two consecutive audit cycles with zero findings.
Reduced IT support involvement by 80% with a fully automated Jamf onboarding experience
Designed and deployed fully automated macOS onboarding via Jamf – including custom branded wallpapers, company banners, and pre-configured settings – reducing IT support involvement by 80% and letting new hires get up and running without a single helpdesk ticket.
Deployed Platform SSO and custom update management – users sign in once, updates happen on time
Implemented Platform SSO at Ontinue so users authenticate once across all apps with a single login. Built a custom restart script that delivers a branded banner giving users a 14-day window to restart their laptop, covering macOS updates and full app patching across both company-deployed and user-installed apps. This ensured full patch compliance within the UK Cyber Essentials SLA.
Experience highlights
- Designed and implemented Jamf workflows, policy and configuration baselines for 300+ macOS endpoints, reducing onboarding time by 80%, improving consistency and endpoint security across the environment.
- Enhanced and created customized Jira workflows and automation for engineering, product, and sales teams. This initiative reduced administrative workload by 35%, accelerated ticket triage workflows, and increased overall team efficiency within six months.
- Led endpoint compliance initiatives aligned to UK Cyber Essentials standards, achieving full OS patch and application update SLAs within 14 days.
- Remediated high-severity vulnerabilities identified in Nessus, eliminating critical findings and reducing enterprise risk exposure.
- Engineered secure identity and access solutions in Microsoft Entra, including conditional access, dynamic groups, RBAC, and PIM workflows, improving access governance and strengthening security posture.
- Delivered end-to-end on-site and remote IT support for Finance, HR, and Executive teams, maintaining above a 95% user satisfaction rate while serving as the primary technical lead for the Tacoma office.
- Administered global MDM infrastructure using Intune and Jamf across 2,800+ endpoints, improving device compliance from 82% to 98% and standardizing endpoint governance.
- Served as SME for Okta authentication, SSO configuration, and lifecycle management, ensuring SLA-compliant provisioning and reducing access incidents.
- Oversaw GCC High tenant environments for federal operations, maintaining 100% adherence to DoD compliance requirements and achieving zero audit findings across two consecutive review cycles.
- Completed enterprise migration from Google Workspace and Zoom to Microsoft 365, provisioning licensing, securing collaboration environments, and deploying Teams conference room systems across US and Canada offices.
- Acted as primary liaison for all Tacoma Zoom and Teams conference room systems, maintaining 99% uptime and resolving 95% of critical issues within one hour for local leadership and executives.
- Partnered with security and infrastructure teams to design scalable IT, reducing operational bottlenecks and strengthening SaaS governance.
- Supervised IT peripheral procurement and inventory using ITAM, CDW, and Oracle Fusion, ensuring 100% asset accountability and eliminating inventory gaps in Tacoma.
- Supported large-scale infrastructure migrations in a regulated banking environment, ensuring secure device deployment and SLA adherence.
- Built and deployed standardized Microsoft Endpoint Configuration Manager images, reducing onboarding time by 30% and improving endpoint consistency.
- Led secure asset auditing and migration for 1,200+ Dell systems, improving inventory accuracy and compliance tracking by 40%.
- Provided Tier 2 support troubleshooting Windows endpoints, identity authentication, and network connectivity issues for on-site and remote users.
- Collaborated with infrastructure and security teams to validate device configurations and ensure compliance with enterprise security standards.
- Acted as lead for daily operations on a multi-technician support team, managing ticket triage and escalations across 5,600+ service requests while maintaining high service quality.
- Trained and mentored new technicians in troubleshooting, documentation, and customer communication best practices.
- Standardized Windows and macOS imaging processes, improving deployment consistency and reducing provisioning time for clients.
- Performed advanced hardware troubleshooting, patching and support on Dell, HP, Lenovo, and Apple systems, resolving complex firmware and component-level issues.
- Managed hardware lifecycle processes including secure data handling, refurbishment validation, and inventory accountability, aligning with company practices and procedures.
Certifications
Jamf Certified Tech (Jamf 200)
Validates advanced Jamf Pro administration – policy management, configuration profiles, and macOS fleet deployment at scale.
Jamf Certified Associate
Foundational Jamf certification covering Apple device management, enrollment, and inventory workflows.
Jamf Protect Associate
Covers macOS endpoint security, threat detection, and behavioral analytics using Jamf Protect.
Okta Certified Professional
Validates expertise in Okta SSO, lifecycle management, MFA, and identity governance across SaaS environments.
Microsoft Azure Administrator
AZ-104 certification covering Azure identity, governance, storage, compute, and virtual networking administration.
CompTIA Network+
Validates core networking skills including TCP/IP, routing, switching, VLANs, and network troubleshooting.
CompTIA Security+
Industry-standard security certification covering threats, cryptography, access controls, and risk management.
AWS Solutions Architect
Validates ability to design and deploy scalable, fault-tolerant systems on AWS infrastructure.
Education
Western Governors University
- In-depth knowledge of cloud technologies including cloud data security, networking, automation and scripting, server administration, database management, and cryptography.
- Participation in activities and societies focused on cloud administration and related technologies.
Clover Park Technical College
- Participated in training for the Pacific Rim Collegiate Cyber Defense Competition.
- Demonstrated expertise in desktop support in a domain environment.