Automation & Endpoint Engineering · AI Operations

I build systems that run themselves.

Twenty-five years of enterprise automation, currently across 150,000 endpoints — from SCCM-to-Intune modernization to zero-touch provisioning. The same discipline now runs my hardest project: AI agents managing a futures trading desk, with authority they have to earn.

See the work Get in touch
Recognized · Sept 2026

Modernizing Endpoint Management Across the Commonwealth

Team recognition from Pennsylvania's Office of Information Technology for moving the Commonwealth from SCCM to Microsoft Intune.

OIT All Hands · September 17, 2026
Read the citation →
25+
years automating enterprise IT
150k
endpoints under management
40+
guards, watchdogs & jobs on the trading desk
0
AI hands on live money — authority is earned

Recognition

Recognized for modernizing endpoint management

At the September 2026 OIT All Hands, Pennsylvania's Office of Information Technology recognized the 14-member endpoint team I'm part of for advancing the Commonwealth's move from SCCM to Microsoft Intune.

Pennsylvania OIT · All Hands · September 17, 2026

Modernizing Endpoint Management Across the Commonwealth

The progress we've made in modernizing endpoint management across the Commonwealth is a tremendous achievement.

Successfully advancing our transition from SCCM to Microsoft Intune — including enterprise patching, software deployment, self-service applications, remote support, and enhanced security — reflects the dedication, collaboration, and expertise of this team.

Thank you for your outstanding work in building a more secure, efficient, and resilient technology environment for our agencies.

— The accomplishment, as presented at the OIT All Hands

Expertise

Twenty-five years of making infrastructure run itself

The through-line is the same at every scale: find the work that is deterministic, documented, repeated — and still done by hand — then automate it inside guardrails.

Endpoint & identity engineering

Intune, SCCM/MECM, Autopilot, Jamf with Apple Business Manager, Entra ID, Conditional Access, Defender and CIS hardening — Windows, macOS and mobile, at enterprise scale.

intune · mecm · jamf · entra · cis

Automation at enterprise scale

Turning repeated, still-manual work into pipelines: zero-touch provisioning, baseline-as-code and cloud migrations — across 150,000 endpoints today.

powershell · policy-as-code · zero-touch

Self-healing operations

Supervisors, watchdogs, an auto-doctor and a maintenance switch that keep a live system honest at 2am — the same shape for a device fleet or a trading desk.

supervisor · watchdogs · maintenance-switch

AI-assisted engineering

LLMs where they hold up: drafting, diagnosing, translating intent into validated code — and reviewing their own work under a human who owns the outcome.

claude · codex · gemini · guardrails

AI agents in the markets

A futures desk where models govern exposure and risk posture — never entries — and every strategy and agent must clear a standing evidence bar before it touches anything that matters.

exposure-governor · prove-then-promote

Guardrails that don't negotiate

Daily-loss lockouts, circuit breakers, kill switches and stand-downs that fail closed. Every error path ends in inaction, never a wrong action.

fail-closed · deterministic · audited

Selected work

Systems I've built

Enterprise endpoint work by day; a personal lab that pushes the same methods into harder territory.

SCCM → Intune

Cloud & co‑management migrations

Moving organizations from on-prem SCCM to cloud-native management: co-management, CMG for internet-based clients, hybrid-to-cloud-only conversions — including the VPN, firewall and Conditional Access redesign nobody budgets for.

See the 2026 recognition →
Autopilot · Dropship

Zero-touch provisioning

A device ships straight from Dell, HP, Lenovo or Apple to the user, powers on and configures itself — apps, policy, security baseline, identity — with no IT hands on the hardware. Built on both the Windows and Apple sides.

PowerShell · CIS

Baseline-as-code libraries

Reusable PowerShell that deploys a complete CIS-aligned Intune/Entra configuration to a fresh tenant — proof-of-concept in hours instead of weeks, and the same code carries to production.

Live build log

A self-managing futures desk

Chart signals become bracketed orders across a fleet of simulation and evaluation accounts, inside a cage of deterministic guards, with AI agents managing exposure on earned authority. Every incident gets a fault line.

Read the journey →
Shipped

NQ Terminal

A live futures dashboard where support and resistance are ranked by how often each level actually held, strategies are scored net of real costs, and signals appear only when independent evidence stacks. Zero AI at runtime.

See ventures →
Personal lab

AI × operations experiments

Event-driven, self-healing automation and LLMs pointed at the ugly parts of operations — log triage, packaging drafts, policy generation, incident autopsies — always with a human owning the blast radius.

Read the field notes →

Approach

Point AI at the right half of the job

Most hard problems — in a fleet of 150,000 endpoints, in a compliance posture, in a trading desk — share a shape: work that is deterministic, documented, repeated, and still done by hand. AI collapses that gap, but only where it's strong. It is not where you put the authority to act.

AI

drafts and diagnoses

Tested code

executes and enforces

A human

owns the blast radius

01

Name the toil

Find the work that is patterned and repeated but still manual — usually the thing everyone has stopped noticing.

02

Encode the intent

Turn tribal knowledge into something explicit: policy-as-code, a spec, a written failure taxonomy.

03

Let AI draft and diagnose

First drafts, format translation, reading logs, explaining what happened. Speed here, never authority.

04

Guard the blast radius

Deterministic validation, staged rings, hard limits, rollback and an audit trail — the part AI cannot be handed.

Writing

Field notes

2026-07 · PREDICTION

"Intune admin" won't be a job title in 3 years

The console is becoming an API. The API is becoming a prompt. The job doesn't die — it moves up a layer. How to be early instead of replaced.

Read the note → 2026-07 · HANDS-ON

I let an LLM write my PSADT packaging script

80% right in 30 seconds. The other 20% could have broken 150,000 machines. Where the line between AI drafting and engineering judgment actually sits.

Read the note →

About

I'm an automation engineer with more than twenty-five years in enterprise IT, currently a senior endpoint consultant managing 150,000 endpoints across Windows, macOS and mobile for a healthcare system.

I like the hard, unglamorous problems: making thousands of devices provision themselves correctly, turning tribal knowledge into scripts, and designing systems that recover on their own when something breaks at 2am.

The same instinct now runs in a harder arena: AI agents on a futures desk, where a wrong order costs real money and every mistake gets a name. Not the hype — the part that ships, and the part that survives contact with a market.

  • Based inMaryland, US
  • StatusUS Citizen
  • RoleAutomation & Endpoint Engineer
  • Scale150,000 endpoints · 25+ yrs
  • RecognitionPA OIT team award · 2026
  • NowAI agents · futures desk
  • Open toAutomation · AI-ops · endpoint modernization

Contact

Let's build something that runs itself

Automation that has to be trusted, AI that has to earn its authority, or a fleet that has to manage itself at 2am — I'm glad to talk.

Email me LinkedIn → Book time