What I do
I specialise in EUC and endpoint engineering across Windows and macOS: modern management, security, application delivery, patching, identity and automation. Endpoint engineering at enterprise scale →
I bring order to fragmented technology: establish the operating model, standardise the platform, secure it, automate the repeatable work and leave something people can actually run. Selected transformations →
Selected transformations
All work →
PokerStars
Governed workplace platforms at enterprise scale
11 deployment paths to one · Jamf scaled to 1,500
Synapse360
Recovering and standardising a Citrix hosted-desktop service
Kiosk-mode Windows endpoints · 65% fewer support tickets
Corporate Options
Building location-independent services before Covid
Redundant colocated platform · RDS desktops from anywhere
The Arts Hub
From scattered tools to one operating platform
199 families · 257 students · 2,460 invoice rows reconciled
Writing
All writing →
Technical
Is your IT setup still earning its keep?
4 August 2026
Technical
The harness matters more than the model
25 July 2026
Technical
Belvedere Is Dead.
17 July 2026
Technical
Replacing Poor-Fit SaaS with Software Built for the Work
15 July 2026
Technical
Jamf used to be a one-horse town. It isn’t anymore
14 July 2026
Technical
Belvedere: An AI Assistant for Email and Admin
18 May 2026
Technical
Vibe coding has a ceiling, and it’s not the model
2 May 2026
Technical
Running your own AI agents on a VPS
19 April 2026
About
Twenty-five years in endpoint security and infrastructure, from multi-country estates and resilient platforms to secure software delivery. I bring the same practical, security-first thinking to each. More about me →