← Home
Summary
Systems administrator running Windows and macOS endpoint fleets at scale across roughly 20 client environments: Intune and Jamf administration, RMM-driven software distribution, patching, and compliance hardening against NIST and CIS baselines. Heavy PowerShell and Bash, including SYSTEM-context deployment scripting and direct Microsoft Graph API work. Also first responder on EDR-escalated endpoint intrusions, combining endpoint engineering with security operations.
Technical skills
Endpoint management. Intune (device configuration, compliance, app configuration and app protection policies, Autopilot, Windows Update rings), Jamf, Atera RMM, Group Policy, Windows 11 and Windows Server, macOS fleet management, silent MSI/EXE packaging, BitLocker.
Scripting & automation. PowerShell (SYSTEM-context deployment, remediation, inventory), Microsoft Graph API, Python, Bash, Git/GitHub, Terraform, Docker, Kubernetes with ArgoCD.
Identity & cloud. Entra ID, Conditional Access, hybrid and Entra join, Active Directory DS, Microsoft 365, Azure, Google Workspace and GCP.
Security & compliance. EDR (Huntress, Microsoft Defender), incident response, vulnerability management, endpoint DLP, NIST SP 800-53/800-171, CIS benchmarks, DISA STIGs, ISO 27001, CMMC L2, HIPAA, PCI DSS.
Servers & networking. Windows Server 2016/2019/2022, DNS, DHCP, IIS, Hyper-V, Azure Migrate, TCP/IP, VLANs, IPsec, Cisco Meraki, firewall and NSG administration.
Physical infrastructure. Rack-and-stack, structured cabling, MDF/IDF closet buildout, UPS, multi-site hardware refresh, component-level repair.
Experience
Systems Administrator · KSP Systems
Feb 2024 — Present
Studio City, CA
- Own endpoint deployment and configuration across roughly 20 client fleets using Intune, Autopilot, Group Policy, and RMM-driven software distribution for cloud- and domain-joined Windows devices and managed macOS endpoints.
- Conduct security audits and remediation mapped to CMMC L2, HIPAA, PCI DSS, and ISO 27001, using DISA STIGs and NIST publications as the control baseline.
- Wrote PowerShell deployment scripts executed in SYSTEM context through RMM to push instrumentation and lab software across engineering test lab workstations, replacing per-machine manual installs, with idempotent detection against Add/Remove inventory.
- Planned and staged Endpoint DLP across a 130-endpoint environment, onboarding 10 Intune/Entra-joined devices by policy and 120 AD domain-joined devices by GPO, with a phased audit-only to block-with-override to full-block rollout.
- Lead responder on EDR-escalated intrusions: contained a SYSTEM-level web shell on an isolated production Windows Server 2019 host, and drove adversary-in-the-middle identity compromises to closure.
- Manage macOS endpoints through Intune and Jamf; maintain open-source Python servers against Microsoft Graph for tenant reporting; author runbooks for every environment change.
Information Systems Technician · City of Malibu
Oct 2022 — Feb 2024
Malibu, CA
- Implemented citywide RMM and EDR platforms and established configuration management and security auditing policy on top of them.
- Assessed control gaps and led implementations across AD DS, Azure, Intune, EDR, SIEM, Cisco Meraki, DLP, and Windows Server; deployed physical infrastructure across city facilities.
- Configured and supported Linux-based QLess display boards across City facilities.
Advanced Repair Agent · Geek Squad
Oct 2020 — Oct 2022
Woodland Hills, CA
- Hardware and OS-level diagnosis and repair across Windows and macOS at volume; improved first-time fix rate and mentored junior technicians.
Projects
socca.tech / soccaAi. Python and Docker vulnerability intelligence pipeline that ingests newly published CVEs, generates risk assessment, proof of concept, and MITRE and CWE mapping, and feeds the output into Microsoft Sentinel.
m365mcp, an open-source Microsoft Graph integration server. cloudterraform, a multi-cloud Terraform template library. exo-arcocd, Kubernetes workload delivery through ArgoCD. Public work at github.com/ianrelecker.
Education & certifications
M.S., Information Technology, California Lutheran University
Aug 2024
IT management, cybersecurity operations, cloud governance, project management, data analytics, AI/ML. GPA 3.8.
B.S., Computer Science, California Lutheran University
Dec 2022
Microsoft Certified: Azure Solutions Architect Expert (AZ-305); Azure Administrator Associate (AZ-104); CompTIA Security+ CE.