Austin, Texas · Open to systems, identity & cloud roles

AntalonJackson Jr.

Systems Administrator · Identity · Endpoint · Cloud

Nine years in enterprise IT. I own Intune and Jamf administration for approximately 750 endpoints, lead identity integrations across 40+ applications, and automate the work that keeps a hybrid environment running.

View live projects ↗View experience ↓Contact meRead my blog ↗
9+years in IT
750current endpoints
40+apps on SSO

LIVE PROJECTS

~/resume $ ls projects/

Explore working labs and the implementation behind them. Browse all live projects ↗

~/projects/azure-landing-zonepublic

azure-landing-zone

A small landing zone in Bicep: a management-group hierarchy, guardrail policies defined at the top, run in Audit until existing resources were compliant, then enforced with Deny on a dedicated resource group, central Log Analytics for activity logs, and a monthly budget with alerts. The live page reads spend and tag coverage, and lets you test a proposed deployment against the policies.

BicepAzure PolicyManagement groupsGovernance
Open landing zone lab ↗Design notes ↗Bicep source ↗
~/projects/okta-lifecycle-labpublic

okta-lifecycle-lab

Okta as the source of truth, in three parts. Lifecycle: a custom SCIM 2.0 endpoint and an OIDC/PKCE app, driven through joiner, mover and leaver runs with session revocation on offboarding. Federation: the same identities provisioned and federated into Entra ID and Google Cloud Identity. Reconciliation: a twice-daily, read-only check that all three directories still agree.

OktaSCIM 2.0OIDC / PKCEEntra IDGoogle Cloud Identity
1 · Lifecycle ↗2 · Federation ↗3 · Reconciliation ↗Design notes ↗Source ↗Okta in Terraform ↗
~/projects/cloud-resumepublic

cloud-resume this site

The page you are reading. Azure Static Web Apps serving the front end and a Python API on the same origin, a Cosmos DB Table API visitor counter, and the infrastructure in Terraform. GitHub Actions applies the Terraform over OIDC federation, so no Azure credentials are stored for it; the site and API upload uses the Static Web Apps deployment token. Failing tests block the deploy.

TerraformAzurePythonCosmos DBGitHub Actions
View source on GitHub ↗Architecture ↗Write-up ↗Tests ↗
~/projects/glasscliffpublic

Glasscliff project hub

The shared home for my working labs: the Azure landing zone, plus the identity lab's lifecycle, federation and reconciliation pages. A Node.js app on App Service with an Azure Functions back end.

Node.jsApp ServiceAzure Functions
Open project hub ↗Source ↗

ABOUT

~/resume $ cat about.txt
about.txtutf-8 · LF

I spend a lot of time doing work, learning new technologies, making projects (like this one.) But, outside of work, I'm a big movie enthusiast (though I wouldn't define myself as a movie buff based on the amount of classics I've missed. Sorry, I've never seen Titantic!) I spend time with my dog, try to find weird, niche events to check out around town, currently I'm trying to make a patio garden and limit my sidequests -- I'm too prone to committing to a new hobby like learning how to smelt.

locationAustin, Texas · on-site, hybrid or remote
availabilityOpen to systems / identity / cloud / endpoint engineer roles
focusIdentity & access · endpoint management · cloud infrastructure
scale~750 endpoints · 90 servers · 40+ SSO integrations
complianceSOC 2 · NIST · ISO · ITAR environments
// what i actually do
  • Design and run Entra ID SSO, SCIM provisioning, Conditional Access and PIM
  • Own Intune and Jamf administration for ~750 current endpoints; previously administered Jamf and Workspace ONE at 1,300+ device scale
  • Automate joiner-mover-leaver with PowerShell, Graph, Logic Apps and Workato
  • Operate hybrid infrastructure across Azure Arc, AWS and on-prem Hyper-V
  • Evidence SOC 2, NIST and ISO controls through access reviews and documentation
How I approach the work
  • Boring tech wins; exciting tech needs a business case
  • Observability first — you cannot fix what you cannot see
  • Smallest possible diff that solves the real problem
  • Write it down: docs are a feature, not a chore

SKILLS

~/resume $ run skills.sh

identity & access 6 entries

Microsoft Entra ID
SSO (SAML / OIDC)
SCIM provisioning
Conditional Access
PIM / privileged access
Hybrid AD / Entra Connect

endpoint management 6 entries

Microsoft Intune
Jamf Pro (macOS)
Windows Autopilot
Workspace ONE
Apple Business Manager
SCCM / Configuration Mgr

cloud & infrastructure 6 entries

Microsoft 365 administration
Azure (Arc, Functions, Policy)
Terraform / IaC
Hyper-V / SCVMM
AWS (EC2, VPN)
Linux administration / baselines

automation 5 entries

PowerShell
Microsoft Graph API
Azure Logic Apps
Python
Workato / Power Automate

security & compliance 5 entries

Defender for Endpoint
Phishing-resistant MFA
Security baselines / ASR
SOC 2 · NIST · ISO · ITAR
Vulnerability remediation

ways of working 4 entries

Runbooks & documentation
Incident response
Mentoring technicians
Cross-team rollouts

EXPERIENCE

~/resume $ git log --oneline --author=antalon

  1. System Administrator

    @ Electric Power Engineers · Austin, TX · identity, endpoint & cloud infrastructure

    FEB 2025 — PRESENT

    Promoted from Help Desk within the first month; senior escalation for identity, endpoints, infrastructure and SaaS integration. Share responsibility for 90 servers, Hyper-V and cross-site storage; mentor technicians and lead implementation projects.

    • Saved an estimated 15–20 hours of manual work weekly through onboarding/offboarding, licensing and VM provisioning automation using PowerShell, Microsoft Graph, Logic Apps and Azure Functions.
    • Led Entra ID SSO integrations across 40+ SaaS applications and production SCIM provisioning for key platforms; implemented Conditional Access, privileged access controls, phishing-resistant MFA and Windows Hello for Business.
    • Cut technician workstation setup from a full day to roughly 20 minutes by building the Intune environment and implementing Windows Autopilot; deployed Jamf Pro to standardize macOS management.
    • Own Intune and Jamf administration for approximately 750 endpoints (700 Windows and 50 macOS), plus iOS/Android devices. Reported compliance at the time of this résumé: 100% of Macs and 96% of Windows devices.
    • Created and automated Linux configuration baselines, migrated standalone DNS to AD-integrated DNS, and managed hybrid servers through Azure Arc, Update Manager and Azure Policy.
    Identity, endpoint & lifecycle implementation
    • Led the HRIS-to-Active Directory integration project, including vendor evaluation, selection and implementation, identity-data alignment, and ongoing vendor troubleshooting.
    • Built onboarding/offboarding applications and automated Microsoft license provisioning and removal, with production SCIM provisioning for key SaaS platforms.
    • Built the Company Portal application catalog and packaged company-wide applications; configured enrollment, compliance policies, update rings and remediation workflows.
    • Deployed Jamf Pro end to end, including enrollment, policies, smart groups and Self Service. Managed Apple Business Manager, CIS-aligned macOS baselines, Defender for Endpoint and attack surface reduction policies.
    • Administered Exchange Online, SharePoint, Teams and OneDrive alongside hybrid Active Directory and Entra ID; implemented approved external-sharing expiration settings and access controls.
    Infrastructure, incident response & recovery
    • Migrated standalone DNS to AD-integrated DNS, removed stale zones and records, corrected DHCP DNS assignments, and validated name resolution and replication.
    • Built and maintained Linux systems for subnet routing, internal applications, office information displays and long-running simulations; standardized configuration and patching.
    • Restored connectivity during recurring SonicWall outages, performed root-cause analysis, established backup connectivity and designed a longer-term firewall replacement approach.
    • Led incident response during a firewall zero-day outage and executed an emergency company-wide VPN migration. Configured a firewall-based site-to-site VPN so AWS EC2 instances could reach on-premises license servers.
    • Built a Hyper-V VM creation application that automated the manual steps normally performed in Hyper-V Manager; provisioned temporary virtual machines for departmental projects.
    • Shared responsibility for Hyper-V/SCVMM and cross-site storage; participated in twice-yearly restore tests of virtual machines, domain controllers, files and folders, documenting and validating results.
    Operational tools, workflow automation & documentation
    • Built and deployed a production OneDrive access portal for managers requesting departed-user data, incorporating time-bound access and HR/Jira process handling.
    • Built and deployed production travel-request automation for approval routing, temporary group membership, ticket closure and SharePoint logging.
    • Built Docebo/Workato provisioning logic and directory manager-status automation to improve downstream identity-data consistency.
    • Built Jira request workflows and an LLM-integrated pipeline that converts resolved incidents into draft knowledge articles and post-incident reviews for peer review.
    • Created a Teams welcome card directing new hires to Company Portal, Jira and Confluence; documented repeatable procedures and mentored technicians on endpoint administration and troubleshooting.
    • Supported SOC 2, NIST and ISO control requirements through access reviews, system documentation, change controls and security-policy implementation.
    Entra IDIntuneJamf ProAzure ArcLogic AppsPowerShellAWS

  2. Help Desk Analyst

    @ SolarWinds · Austin, TX · hybrid · global user base

    JUN 2024 — DEC 2024
    • Delivered Tier 1 and Tier 2 incident response for a global user base through the SolarWinds Service Desk, supporting daily IT operations and hardware lifecycles.
    • Accelerated a Windows 11 migration with zero data loss by engineering PowerShell scripts to automate Autopilot hardware hash imports and user profile backups.
    Additional operational scope
    • Supported Windows and macOS users at the Austin headquarters and remotely; handled new-hire device setup, on-site inventory and reusable documentation for the IT team.
    PowerShellWindows 11AutopilotService Desk

  3. IT Services Technician II

    @ SpaceX · Bastrop, TX · on-site · ITAR-controlled M365 GCC

    JUL 2023 — DEC 2023
    • Primary on-site administrator for Intune, Jamf and Apple Business Manager, supporting production and engineering users in a strictly ITAR-controlled Microsoft 365 GCC environment.
    • Wrote infrastructure runbooks and coordinated rollouts with remote network and security teams to support technician onboarding and repeatable operations.
    Production systems & networking scope
    • Supported Windows, macOS and Linux workstations alongside production equipment, mobile devices and Zebra printers.
    • Patched and configured network connectivity from device drops to switch ports for user and production needs; assisted with network-device troubleshooting.
    • Managed Jira queues, IT equipment procurement and assets, and documented operational procedures for the Bastrop site.
    M365 GCCITARIntuneJamfApple Business Manager

  4. IT Manufacturing & Desktop Support Technician

    @ Tesla · Buffalo, NY → Austin, TX · on-site · 24/7 manufacturing

    MAR 2020 — JUN 2022SEP 2022 — JUL 2023
    • Imaged and managed 1,200+ workstations supporting round-the-clock manufacturing and corporate users.
    • Created configuration profiles and policy enforcement across 1,300+ devices as the primary on-site MDM administrator for Jamf and Workspace ONE.
    • Built Power Automate flows and PowerShell scripts for ticket intake, Teams issue alerts, equipment-order notifications and recurring support tasks.
    Manufacturing infrastructure & earlier desktop scope
    • Configured and supported Windows/Linux manufacturing machines, Zebra scanners and printers, and iPads in production environments.
    • Patched and configured network ports; used SolarWinds network tools for IP address allocation and network troubleshooting.
    • Managed print servers and assisted with server installation and intermediate distribution frame (IDF) maintenance.
    • Earlier desktop responsibilities included Windows, macOS and Linux deployments for 500+ users on-site and across the East Coast, new-hire orientation, and IT asset procurement.
    JamfWorkspace ONEPower AutomatePowerShellImaging

  5. Service Desk Agent

    @ IBM · Buffalo, NY · on-site · large distributed user base

    JAN 2017 — MAR 2020
    • Delivered contracted service desk support for IBM clients New York State and Anthem, Inc. and its subsidiaries in HIPAA-regulated environments. Resolved high-volume incidents through ServiceNow and managed endpoint configurations across a distributed user base.
    • Maintained application performance across remote devices by executing targeted software deployments and troubleshooting via SCCM.
    Troubleshooting, escalation & training
    • Used Splunk to investigate user-account and network issues and managed VIP and escalation queues through ServiceNow.
    • Created troubleshooting documentation and trained new hires on support methods and enterprise applications.
    ServiceNowSCCMEndpoint config

CERTIFICATIONS & LEARNING

~/resume $ tail -f education.log
// professional development

Professional certifications

Azure · security · endpoint management · Linux

Certifications regarding hands-on administration across identity, endpoint management and hybrid infrastructure.

Hands-on labs

Personal Azure and Okta tenants · ongoing

Bicep landing zone, an Okta identity lab (lifecycle, federation into Entra ID and Google, reconciliation), and this site. Built to break things somewhere that is not production and learn a bit more.

Continuous learning

Currently

Infrastructure as code at scale, Azure identity governance, and automating things that I don't really like doing.

// certifications
2026Microsoft Certified: Azure Administrator Associate (AZ-104)
2025CompTIA Security+ (SY0-701)
2025Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)
2025Red Hat Certified System Administrator (RHCSA, EX200)
2025ITIL Foundation
2026AWS Certified AI Practitioner (AIF-C01)
2026AWS Certified Cloud Practitioner (CLF-C02)

CONTACT

~/resume $ mail --to antalonj@gmail.com
antalonj@gmail.com

For systems, identity, endpoint or cloud opportunities, get in touch by email.

Email Antalon ↗
git remote -v
emailantalonj@gmail.compush/fetch
githubgithub.com/Spiiikeorigin
siteglasscliff.onlinewww
projectsprojects.glasscliff.onlinearchive
// availability matrix
statusOpen to systems / identity / cloud / endpoint engineer roles
start dateBy agreement
modelsRemote preferred · Austin hybrid / on-site
timezoneUS Central · America/Chicago