What I do
I specialise in EUC and endpoint engineering across Windows and macOS: modern management, security, application delivery, patching, identity and automation. Endpoint engineering at enterprise scale →
I bring order to fragmented technology: establish the operating model, standardise the platform, secure it, automate the repeatable work and leave something people can actually run. Selected transformations →
Selected transformations
All work →
PokerStars
Governed workplace platforms at enterprise scale
11 deployment paths to one · Jamf scaled to 1,500
Synapse360
Recovering and standardising a Citrix hosted-desktop service
Kiosk-mode Windows endpoints · 65% fewer support tickets
Corporate Options
Building location-independent services before Covid
Redundant colocated platform · RDS desktops from anywhere
The Arts Hub
From scattered tools to one operating platform
199 families · 257 students · 2,460 invoice rows reconciled
Writing
All writing →
Technical
Your approved software list only works if you compare it with what is installed
16 September 2026
Technical
What the Data Asset Foundations framework actually means for your endpoint estate
2 September 2026
Technical
The unmanaged Mac estate and Cyber Essentials v3.3
26 August 2026
Technical
Is your IT setup still earning its keep?
4 August 2026
Technical
The harness matters more than the model
25 July 2026
Technical
Belvedere Is Dead.
17 July 2026
Technical
Replacing Poor-Fit SaaS with Software Built for the Work
15 July 2026
Technical
Jamf used to be a one-horse town. It isn’t anymore
14 July 2026
Technical
Belvedere: An AI Assistant for Email and Admin
18 May 2026
Technical
Vibe coding has a ceiling, and it’s not the model
2 May 2026
Technical
Running your own AI agents on a VPS
19 April 2026
About
Twenty-seven years in endpoint security and infrastructure, from multi-country estates and resilient platforms to secure software delivery. I bring the same practical, security-first thinking to each. More about me →