I'm John Beecroft. I run endpoint engineering for a 4,000-device enterprise fleet, 70% of it macOS: zero-touch provisioning, certificate-based NAC, and compliance-gated Zero Trust access.
jamf: policy "Baseline-macOS" → fleet · success
A device is claimed at purchase — Apple Business Manager or Windows Autopilot — and mapped to its enrollment profile before the box ever ships.
First boot phones home. The machine lands in Jamf Pro or Intune with zero hands on it — no imaging, no cart, no desk visit.
Baselines apply as code: disk encryption, Wi-Fi certificates, EDR, and the app set — the same result every time, reviewable like any other commit.
The device proves itself: compliance evaluated, an EAP‑TLS certificate onto the network, conditional access into the apps. Health is the key, not location.
Management of 4,000 macOS, Windows, and Linux devices (70% Mac) through Jamf Pro and Microsoft Intune. Zero-touch provisioning through Apple Business Manager and Windows Autopilot cut new-hire setup from three hours to under thirty minutes. Certificate-based 802.1X NAC on Portnox Cloud RADIUS, engineered to survive outages. Remediation and reporting automated in PowerShell, Bash, and Python, accelerated by AI-assisted engineering with Claude Code.
A computer-vision and ADS-B platform for aviation ground operations. Owned the product, the architecture, and an AI-assisted CI/CD pipeline, end to end.
A competitive Call of Duty esports organization built and run end to end: recruited and developed the roster, managed tournament logistics, and ran the brand and its community.