Senior Digital Workplace

Tim Vreeland

Senior Digital Workplace Engineer

Knoxville, Tennessee, United States

SUMMARY

Results-driven Senior Digital Workplace Engineer with over five years of hands-on experience in Microsoft Intune, specializing in designing and implementing policies, configurations, and application deployments for Windows and iOS devices. Proficient in Autopilot profile creation, device enrollment, scripting for automation, and endpoint security. Recognized for streamlining IT operations, enhancing system security, and providing exceptional technical support in fast-paced environments. Strong skills in cloud-based technologies, Active Directory, and technical documentation.

In addition to my technical expertise, I have a proven track record of managing large-scale projects and leading cross-functional teams to achieve organizational goals. My ability to develop and implement innovative solutions has resulted in significant improvements in system performance and user satisfaction. I am adept at troubleshooting complex issues and providing timely resolutions, ensuring minimal disruption to business operations. My commitment to continuous learning and staying updated with the latest industry trends allows me to deliver cutting-edge solutions that drive efficiency and productivity.

TECHNICAL SKILLS

Endpoint Management: Microsoft Intune, Autopilot, JAMF, Group Policy, Azure AD, Conditional Access

Scripting & Automation: PowerShell, WSUS, Azure Blob Storage

Virtualization: VMware vSphere, Hyper-V

Operating Systems: Windows, iOS, macOS, Linux

Cloud Services: M365 Administration, Exchange Online, Azure Intune, Azure Backup

Security: PKI, Smartcards, Endpoint Security Policies, Multi-factor Authentication

Networking: VPNs, VoIP, Network Security

Backup Solutions: CA BrightStor, Tape Backup, Azure Backup

Imaging & Cloning: MDT/BDD, FOG Server, PXE Boot Chain, Slax OS

Documentation: IT Processes, Change Control Plans, User Guides

WORK EXPERIENCE

Senior Digital Workplace Engineer

Material Plus (Acquired Interviewing Services of America – same company) – Century City, CA

January 2020 – Present

Solely managed Windows endpoint infrastructure, enrolling over 2,000 devices in Intune, including both virtual and physical environments.

Designed and deployed over 100 applications using Azure groups, creating custom configuration profiles to replicate on-prem GPOs and improve device compliance.

Built and optimized Autopilot profiles, including hardware hash extraction scripts for seamless deployment.

Developed custom PowerShell scripts for tasks such as LAPS remediation and hardware lifecycle management, enhancing operational efficiency.

Implemented Conditional Access policies for Windows and iOS, securing enterprise data by limiting app-to-app sharing and ensuring compliance with organizational security standards.

Synthetically joined macOS devices to Intune, enabling Microsoft Defender for Endpoint (MDE) profile updates and enhancing macOS security management.

Created and maintained detailed IT documentation and how-to guides to enhance user self-service capabilities and support IT operations.

Trained IT staff and acted as a backup for JAMF administration, registering Macs in Azure AD and building endpoint policies.

Highlights – Project One

June 2021 – August 2021

Spearheaded the implementation of Project One, integrating Windows, Mac, and mobile device management into a unified system.

Tested and deployed Kerberos for on-prem file share access, reducing user friction by eliminating repetitive domain logins.

Developed end-to-end scripting solutions for hardware hash collection and enrollment into Autopilot.

Managed over 500 endpoints during the transition, ensuring all devices were compliant with new security policies and configurations.

Built out 140 custom app installers, along with deploying configurations and policies to ensure seamless integration and functionality.

Exported all endpoint hardware hashes and uploaded them to Azure Blob Storage.

Pulled lists of all deployed applications from Managed Engine along with their settings, configurations, and policies, and replicated them in Intune.

Highlights – Managed Engine to Intune

February 2022 – May 2022

Built scripts in Managed Engine (ME) to export all endpoint hardware hashes and upload them to Azure Blob Storage.

Pulled lists of all deployed applications from Managed Engine along with their settings, configurations, and policies, and replicated them in Intune.

Developed custom scripts to download Windows 11 ISO with tasks to install at set times. After devices rebooted and installed the ISO, they automatically joined Intune as Azure AD joined devices.

Windows System Administrator

Interviewing Service of America, Inc. (Subsidiary of Material Holdings LLC) – Van Nuys, CA

January 2006 – December 2020

Deployed and managed Active Directory and Group Policies, automating user resource connections and system updates via PowerShell.

Oversaw network security, including WSUS updates, anti-virus solutions, and data control measures to enhance software security.

Built and managed VMware and Hyper-V environments, including SAN storage systems for file shares and server archiving.

Acted as the primary escalation point for advanced network/system issues, maintaining a 100% issue-resolution record.

Created detailed IT documentation, including disaster recovery plans and IT operation guidelines, improving efficiency and readiness.

Transitioned legacy on-premises systems to cloud-based solutions, including Exchange to Office 365 and Active Directory to Azure AD, reducing costs and improving scalability.

Built and managed MDT/BDD environments, streamlining the deployment of Windows images and automating the configuration of devices to ensure consistent and efficient rollouts.

Implemented a FOG (Free Open Source Ghost) server on Linux Ubuntu, hosting a micro Linux (with custom settings) to facilitate imaging and cloning processes.

Built a PXE boot chain to allow endpoints to access a GUI for different imaging and cloning tasks, or to boot into Slax OS loaded entirely to RAM, saving cost on not needing to replace devices.

Managed the CA BrightStor backup system, dealing with tape backups and offsite storage. Later migrated the backup solution to Azure Backup, significantly reducing backup and restore times.

Project Contractor (Part time project work)

Capital Brands – Los Angeles, CA

February 2019 – September 2019

Established and standardized Azure Intune configurations for enhanced security and streamlined system management.

Trained IT staff on Azure Intune and Azure AD best practices, reducing costs and improving deployment times.

Developed comprehensive documentation and facilitated effective user communication for IT transitions.

EDUCATION

Cleveland High School – Reseda, CA

Graduated: 2002

CERTIFICATIONS

Certified Hyper-V Systems – 2013

HONORS & AWARDS

Recognized for exemplary service and 100% issue-resolution scores throughout tenure.

LANGUAGES

English (Fluent)

Contact this candidate