Jose Luis Lopez

Technical lead for enterprise endpoint and hybrid infrastructure platforms serving more than 150,000 users worldwide. Lead a team of eleven engineers across Apple and enterprise mobility services. I own engineering direction across device management, identity integration, and conditional access while staying close to policy configuration, hardening, automation, and escalation.

• Led the separation of endpoint and infrastructure services out of shared corporate systems into independent Fortune 500 environments, migrating approximately 100,000 endpoints over a six to eight month window while rebuilding device governance, identity, and compliance with no service disruption.
• Designed host hardening baselines for macOS, Windows, and iOS that enforce encryption, set a steady patch cadence, and align device posture with conditional access.
• Architected Intune and Jamf Pro frameworks that cut configuration drift and gave the security team clear, fleet wide compliance visibility.
• Operate Entra ID conditional access tied to Intune compliance, so only encrypted, patched, policy compliant devices reach corporate resources.
• Built Intune device compliance policies that check encryption state, OS version, patch level, and configuration posture, then feed those signals back into Entra ID as the trust gate for access.
• Deploy and manage business applications and security tooling through Intune and Jamf, covering packaging, phased rings, required versus available assignment, and rollback so agents and apps land consistently across the fleet.
• Built a vulnerability management workflow that tracks exposure across the fleet, prioritizes remediation by risk and user impact, and drives critical patches to roughly 80 percent fleet coverage within five days, closing the loop through deployment and verification.
• Wrote PowerShell and Bash automation, including GenAI assisted scripts, to streamline provisioning, hardening, deployment, and reporting while reducing manual engineering effort.
• Use Azure DevOps pipelines and repos to version control endpoint configuration, automate policy and script deployment, and run device management changes through a reviewed CI/CD style release process.
• Serve as senior escalation lead for endpoint major incidents, coordinating identity, security, networking, and platform teams to restore service and reduce risk.
• Define and track endpoint platform KPIs with Security and Risk, using data to size controls correctly and prove compliance posture over time.

Supported global endpoint and mobility platforms across multiple business units.

• Shaped the enterprise Intune governance model, contributing to policy design, conditional access alignment, and compliance enforcement across a large, mixed device population.
• Partnered with Information Security and Risk to align device controls with enterprise audit standards and strengthen endpoint governance.
• Improved endpoint lifecycle documentation and pushed global standardization so support and engineering teams worked from one consistent baseline.
• Participated in change advisory for endpoint platform updates and risk managed releases.

Led global escalation operations for enterprise mobility and secure communication platforms serving financial and government clients.

• Acted as senior technical authority during high impact incidents involving mobile infrastructure and secure communication platforms.
• Advised enterprise customers on platform resilience, performance, and operational stability under pressure.
• Reduced mean time to resolution by roughly 25 percent through structured operational playbooks, stronger documentation, and repeatable escalation practices.