Lead design, hardening, automation, and operation of enterprise endpoint environments across macOS and Windows. Own MDM and EDR services (Intune, Kandji, Fleet, CrowdStrike, SentinelOne, Defender), device lifecycle, vulnerability management, automated provisioning, identity integrations, scripting automation, incident triage, and tooling roadmap while partnering with Security, IAM, and Cloud teams.

Configure end-to-end SSO (SAML/OIDC) and SCIM provisioning for enterprise SaaS apps, implement group-based RBAC in Okta, deploy Okta configs via Terraform, manage provisioning lifecycles and a high-volume integration ticket queue, and author/execute CAB change tickets while guiding non-technical stakeholders through implementations.

Operate and troubleshoot Azure data platform environments (SQL Managed Instance, ADF, SSIS, Storage, App Services). Monitor and resolve incidents, validate backups, build automation and self-healing pipelines, maintain CI/CD in Azure DevOps, perform off-hours on-call duties, and continuously eliminate manual operational toil through scripting and Azure-native automation.