Windows and macOS endpoint platform: Experience administering enterprise endpoint management platforms such as Microsoft Configuration Manager (MECM/SCCM), Microsoft Intune, and Jamf Pro, with primary emphasis on Windows, including co-managed configurations, operating system deployment and provisioning, automated device enrollment through Apple Business Manager, feature and security update servicing, application packaging and deployment, configuration profile and policy management, driver, firmware, and BIOS management, third-party patching, endpoint encryption such as BitLocker and FileVault, and automation through PowerShell and shell scripting. Domain, directory, and authentication services: Experience administering Active Directory Domain Services and Microsoft Entra ID in a hybrid identity environment, including device join methods, directory synchronization, Group Policy design and deployment, login script management, and modern authentication methods such as multifactor authentication, Windows Hello for Business, and FIDO2 passkeys.