IT Support Engineer II (Endpoint & IAM Engineering) · TheZebra
September 2025 – April 2026
- Built Intune endpoint management from the ground up, transforming a loosely enforced environment into a standardized, secure system with defined compliance baselines across 300+ endpoints.
- Led enterprise migration of 300+ endpoints from Windows 10 to Windows 11 through staged deployment rings, compatibility testing, and phased rollout with minimal user disruption.
- Eliminated standing local administrator access across 300+ endpoints by implementing RBAC and privileged access workflows, reducing attack surface and aligning with security best practices.
- Packaged and deployed enterprise applications via Intune, replacing ad hoc installs with standardized, auditable software distribution.
- Administered Okta, Entra ID, and Google Workspace for identity lifecycle management, SSO, and access control; enforced SOC 2-aligned identity and device security controls.
- Automated routine tasks using PowerShell: group access provisioning, mailbox modifications, printer SMTP deployment, and policy automation.