Lead Infrastructure Engineer · Brooklyn, New York

Apple endpoints.
Identity. Automation.

I manage the devices, access, and cloud services that support everyday work—and build tools to make IT operations more effective.

623Apple devices audited
595Macs in detection workflow scope
19Addigy policies in deployment

By the numbers

A closer look
at the scope.

623devices audited

611Macs

12Other Apple devices

Fleet composition from the audit: 611 of 623 devices were Macs. The remaining 12 were other Apple devices.

595

Macs in security detection workflow scope

19 policies in the Addigy deployment

Each block represents one policy. Scope includes devices with offline coverage gaps; it is not a count of completed scans.

01 / Selected work

Technical depth.
Practical application.

01

Making Apple fleet risk visible

Endpoint audit · 623 devices, including 611 Macs

I audited an Apple fleet and reconciled device ownership, identifying gaps in encryption, recovery-key escrow, operating systems, and device check-ins.

The deliverable: findings to inform remediation planning, with visibility into the devices and controls needing attention.

02

Security detection across Addigy policies

19 policies · 595 Macs in scope

I deployed an Addigy security detection workflow across 19 policies covering 595 Macs, reporting available scan results and exceptions.

Coverage matters: I identified gaps for offline devices so the reporting distinguished available results from devices still outside scan coverage.

03

Tracing identity and application access

SSO · SCIM provisioning · Application entitlements

I investigate access issues using sign-in logs, group rules, assignments, SCIM provisioning, and application-side entitlements to distinguish authentication issues from licensing issues.

I also administer Google Workspace accounts, organizational units, licensing, delegated mailboxes, and distribution groups, reconciling group membership with the identity provider.

04

Connecting IT operations through automation

Python · Bash · REST APIs · AI-assisted workflows

I develop and adapt tools for device audits, access checks, and operational reporting, using AI assistance to accelerate implementation and investigation.

I implemented a webhook relay connecting deployment events to Slack—including success, failure, promotion, and rollback notifications—and coordinated client verification.

02 / Expertise

From the device
to the identity layer.

Apple & endpoint management

Device inventory, configuration profiles, encryption, software deployment, and security assessment.

Addigy MDM / macOS / iOS / FileVault

Cloud & identity

Workspace administration, single sign-on, provisioning, group-based access, and mailbox delegation.

Google Workspace / SAML / OIDC / SCIM

Automation & delivery

API-driven audits and reporting, AI-assisted investigation, and an Agile approach to prioritizing technical work.

Python / Bash / REST APIs / GAM / AutoTask

03 / Experience

Hands-on roots.
Infrastructure focus.

Blackline

Nov 2025–Present

Lead Infrastructure Engineer

Digital Healer

Oct 2013–Present

Systems Administrator

Independent Computer Repair

Jun 2003–Oct 2013

On-site hardware repair, network troubleshooting, custom PC builds, and customer support.

Addigy Certified Professional

Issued April 2026
Expires April 2027

English & Spanish

Native or bilingual proficiency

04 / Contact

Let’s talk infrastructure.

Based in Brooklyn, New York.