Skip to main content
Selected systems

Proof-backed IToperations work.

Automation, endpoint, identity, and service-delivery systems framed by the business problem, the build, and the measurable result.

Cost avoided

$3.48k

annual service-desk SKU avoided

Budget delta

Fleet mapped

223

devices tied to owners and migration state

Inventory ledger

Setup compressed

4h → 15m

provisioning cycle shortened

Runbook path

Filter
6 systems
ITSM AI
Service desk

Cost avoidance

$3.48k

annual spend kept out of the stack

1Ticket intakeemployee request
2AI triageclassify + draft
3MCP actionFreshservice update
4Resolved pathdeflect or escalate
SKU avoidedHelp desk AI stayed in-house

AI-assisted ITSM integration without vendor lock-in.

Custom OpenAPI schema and MCP server that brought AI help into the service desk while avoiding another vendor SKU.

Impact

Kept a paid help-desk AI SKU out of the stack.

MDM Map
Endpoint fleet

Fleet coverage

223

devices tied to owners and state

FleetSourceOwnerState
macOSMerakiowner setready
WindowsIntunestate setqueue
SharedJumpCloudrouteverify
Fleet mappedInventory became migration paths

Device migration tracker for a mixed endpoint fleet.

Meraki API and Apps Script workflow inventorying devices and coordinating Windows and macOS migration paths.

Impact

Created accountable migration paths across the fleet.

Zero Touch
Onboarding

Provisioning time

4h → 15m

manual setup compressed into a handoff chain

Repeatable onboarding lane

One checked path from access request to ready workspace.

ManualRepeatable
  1. 1Identity
  2. 2Device
  3. 3Apps
  4. 4Tracker
Time reducedDay-one setup without ticket pileup

Provisioning across six-plus enterprise platforms.

Onboarding automation spanning identity, device management, productivity suites, creative tools, and work tracking.

Impact

Turned day-one setup into a short, repeatable path.

CI/CD
Packaging

Packaging output

18+

apps moved through one release lane

Build

pass

Wrap

pass

Upload

pass

Release

ship
Repeatable releasesEndpoint changes shipped cleanly

Win32 app packaging pipeline for Intune.

GitHub Actions pipeline for repeatable application packaging so endpoint changes ship in minutes instead of hours.

Impact

Standardized package delivery for recurring endpoint changes.

IAM
Identity

Lifecycle coverage

J/M/L

joiner, mover, and leaver flows covered

Joiner

access + apps

guarded

Mover

groups + roles

review

Leaver

disable + audit

closed
JML guardedSafer account-change paths

Identity lifecycle automation with clear guardrails.

Okta Workflows and SCIM/SAML provisioning patterns that make account creation, changes, and exits less fragile.

Impact

Made account changes safer, faster, and easier to audit.

Tooling
Internal tools

Utility coverage

5 lanes

small tools across the recurring seams

$ python audit.py --owner endpoint

$ ts-node sync tickets --dry-run

$ pwsh package.ps1 -Target Intune

Platform gaps closedScripts where SaaS stops short

Small tools that remove recurring support friction.

Python, TypeScript, Bash, PowerShell, and Apps Script utilities for the repetitive seams that slow IT teams down.

Impact

Reduced repeated manual work without overbuilding a platform.

Let’s connect

Have a project, role, or operations problem worth untangling? Send a note and I’ll follow up from Miami.

Availability

Operations systems, endpoint, IAM, and automation work.

Miami
Problem framed
Systems mapped
Follow-up clear

2026 © Samuel Beguiristain

Built with Next.js