20+ years in Microsoft endpoint engineering. Senior Manager at BCG. Available for consulting, automation builds, and technical assessments — for teams of any size.
Free discovery call · No commitment · Quote sent within 48 hours
No case study slides — just what I've actually done and what you can check yourself.
Endpoint engineering is the day job, not a side project — this is the work I do every week, not a weekend hobby I'm trying to monetise.
Different regulatory pressure, different device fleets, same rigorous approach to Intune, Entra ID, and Zero Trust rollouts.
83+ posts of real working PowerShell, real Graph API code, and real troubleshooting on the blog — read a few before you book a call and judge the depth for yourself.
Practical work — not slide decks. Every engagement ends with working scripts, documentation, and a handover session.
Intune update rings, quality update policies, Autopatch group design, hotpatch readiness, and reporting. From first ring to production ring — fully automated.
FIDO2 / passkey deployment, Windows Hello for Business provisioning, phishing-resistant MFA migration planning, and Conditional Access policy design for Zero Trust.
Custom automation using Microsoft Graph — bulk reporting, scheduled tasks, tenant audits, and integration pipelines. App-only cert auth, pagination, production-ready.
Proactive remediations, Win32 app packaging, compliance policy builds, and device health reporting. Covers Windows, macOS, iOS, Android, and Linux.
Conditional Access policy design, authentication strength requirements, named location configuration, and compliance-gated access. Aligned to NCSC and CIS benchmarks.
Autopilot v2 profile design, Hybrid Join configuration, tenant-to-tenant migration, device naming conventions, and end-to-end enrolment testing and sign-off.
Three steps from first contact to delivered work.
Tell me what you're trying to solve. No preparation needed — just a conversation about your environment and what's blocking you.
After the call I'll send a clear scope of work and a fixed quote. No hourly billing surprises — you know exactly what you're getting before we start.
Working scripts, full documentation, and a handover session so your team understands and can maintain everything we built together.
I've delivered endpoint solutions across financial services, healthcare, energy, and professional services.
Who need a specific automation built that their team doesn't have time or experience to write.
Who need deep Intune or Entra expertise for a specific client engagement or migration project.
Going through an Autopilot rollout, Entra migration, or Zero Trust programme and need experienced hands.
Send me a message on LinkedIn and we'll figure it out. No sales process — just a straightforward conversation.
Or email: iawan@endpointweekly.com