I started out managing on-prem endpoints with SCCM back when MDM was barely a concept. Over the years I watched the landscape shift — cloud-native management, identity-first security, Zero Trust — and I moved with it. Today my work sits at the intersection of endpoint management, identity, and threat protection.

I’ve led migrations from on-prem AD to Entra ID, built Conditional Access policies from scratch for organisations with no MFA baseline, deployed Autopilot for hybrid and cloud-native device estates, and tuned Defender XDR detections in environments where alert fatigue was the real threat.

My platform coverage has never stayed narrow. Beyond Windows, I’ve managed macOS fleets with JAMF, mobile device policies across iOS and Android, and VDI/Citrix environments where the endpoint isn’t even physical hardware — it’s a session. Each platform breaks in its own way, and you only really learn that by running all of them in production at once.

I also come from a full-stack and mobile development background, which shapes how I approach this work — I don’t just configure policies through a GUI, I understand what’s happening underneath: the Graph API calls, the OMA-URI payloads, the actual logic a script or automation is running. That’s usually why I end up in KQL and PowerShell more than most admins.

Outside of the day job, I run modernworkplacesecurity.com to document my thinking and share practical guidance. The YouTube channel at @UpSkillBotics is where I break things down visually for the community.