I'm a self-taught endpoint engineer. I have years of learning by doing in my homelab, and a habit of pursuing a problem until I find the best solution. I've been doing this for nearly 10 years, and most of that time I've worked at a scale where automation was critical.
At EMCOR I owned endpoint management strategy for 50,000+ devices across 100+ operating companies in a MSP-like model. That meant a solid baseline that meets every org’s requirements, while also tailoring solutions to each org’s specific needs when needed.
What I bring:
Intune & Autopilot: configuration and compliance policy, ESP design, driver management, Hybrid and Entra join, and co-management with SCCM/ConfigMgr, including OSD task sequences.
Packaging: Win32 apps with PSAppDeployToolkit v4, detection rules, supersedence.
Automation: PowerShell and Microsoft Graph for bulk operations across thousands of devices at once, plus the Graph SDK, REST, and remediation and detection scripts. If a task needs doing more than twice, I script it.
Identity & Zero Trust: Entra ID, Conditional Access, authentication strengths, phishing-resistant MFA (FIDO2, Windows Hello for Business), certificate-based auth and break-glass account design. This is where endpoint work turns into security work.
Patching & vulnerability management: Windows Update for Business, Patch My PC and Tanium, with compliance policies that actually block devices that aren't compliant.
macOS: Jamf 100 certified. I've worked on Platform SSO during ADE, FileVault escrow, Installomator deployments and declarative (DDM) software updates.
Outside of work, I run a Proxmox homelab with GPU passthrough, split-horizon DNS on Technitium, Tailscale, a Samba Time Machine server and local LLM inference. Next up is standing up ConfigMgr on a secondhand 1U server so I have somewhere to break things safely. I also restore old hardware (right now it's a launch-model PS3), and I have a background in percussion.
I'm looking for Senior Endpoint Engineer, Client Platform Engineer or Endpoint Architect roles, either remote or hybrid in Austin, TX. I'm open to anything!
