Scaling Mac management through automation, intelligence, and care.
I run Jamf for large higher ed environments - thousands of Macs, different audiences, and the guardrails that keep things secure but not annoying. AI is how I script faster, write better runbooks, and move changes through approvals without slowing down.
Recent focus: license hygiene, token/cert refreshes, Jamf SSO rollout, smart groups for DNS/Zoom issues.
What I do
Smart groups, controlled OS deferrals, app deployments that behave in labs, zero-touch enrollments that don’t surprise users.
Policy-driven
Use LLMs to draft scripts, summarize logs, write runbooks, and generate change descriptions — then harden for production.
LLM + scripting
FileVault, bootstrap tokens, Activation Lock, CrowdStrike/Tenable via Jamf, and dashboards to catch drift quicker.
Secure-by-default
Shell, zsh, Python, Jamf API to build inventory, cleanup scripts, and “one-click” remediation for common Mac issues.
Bash · Python · Jamf API
Semester turnover, shared labs, loaners, repairs that break ADE, and change control that can’t take down onboarding.
Higher ed ready
Recent impact
Built PreStages and profiles that keep MDM trust intact even through repairs and reassignments.
Smart groups + EAs to find non-reporting or non-escrowed Macs, then target re-escrow or AV/EDR updates only where needed.
Used AI to generate Jamf policies, CLI scripts, and user-facing instructions - cutting turnaround by almost half. Every script starts with AI, ends with testing — and ships only when it’s proven.
Removed stale devices, kept ADE/ASM/VPP/Jamf certs current so big rollouts don’t fail mid-semester.
Mini case studies
EA to capture dig and scutil --dns output, then smart groups to target problem Macs (Zoom / BloxOne edge cases).
Jamf EA · networking
SSO (Shibboleth/Duo-style) for Jamf accounts to reduce sprawl and unlock Jamf’s newer features safely.
SSO · Duo
Flow for large apps (GIS, research, creative) to be signed, smoke-tested on small smart groups, then rolled out widely.
Scoped rollouts
API scripts to prune stale Macs and keep license counts realistic - plus dashboards execs can actually read.
Jamf API · reporting