Benjamin J.

System Engineer @ Celonis

About

Modern Workplace & Endpoint Engineer with 7+ years of experience in Identity, MDM, and automation. I manage large-scale environments across macOS, Windows, iOS, and Android using Intune and Kandji, and I design secure, reliable, and automated device experiences for global teams. I have led major projects such as migrating 3,000+ macOS devices to Kandji, redesigning Conditional Access policies in Entra ID, implementing Zoom Phone globally, and automating operational workflows with PowerShell, and Python via GitHub. I enjoy building secure, scalable, and user-centric workplace environments - and solving complex challenges between Identity, Security, and Endpoint Management.

Country

Germany

City

Greater Munich Metropolitan Area

Industry

Computer Software

Skill

Netzwerkadministration, Windows 10, Windows-Systemadministration, Linux-Systemadministration, Server-Administration, Python, Microsoft Azure, Microsoft Intune, Gsuite, Windows PowerShell, Active Directory

Experience

System Engineer

Celonis

2021-6 - Present · 5 yrs 4 mos

München, Bayern, Deutschland

- Identity & Access Management (Entra ID): Responsible for user lifecycle operations, application onboarding (Enterprise applications, SSO, App registrations), and the redesign of Conditional Access policies to strengthen overall security posture. - Management of macOS, Windows, iOS, and Android endpoints using Intune and Kandji, including compliance policies, provisioning, application deployment, and automated device workflows. - Automation of internal processes and maintenance of GitHub-based workflows, reducing recurring operational workload. - Close collaboration with network, security, and support teams to deliver IT projects. - Participation in internal audits (e.g., ISO 27001), including preparation and responding to audit-related requests. - Creating detailed documentation for the implementation and optimization of new and existing business processes. - Creation of detailed technical and process documentation to support implementation and optimization efforts. Projects | Lead responsibilities - Migration of ~3,000 macOS devices from Intune to Kandji. - Data center VM migration to GCE, EC2, and physical server relocations. - Remote-infrastructure modernization for new and existing offices in Amsterdam, Stockholm, and Pristina (network, printing, conferencing). - On-Prem GPO migration to Microsoft Intune. - Android Enterprise integration to enable BYOD usage. Projects | Supporting responsibilities - Decommissioning of on-prem Active Directory towards a cloud-only Azure environment. - Redesign of the Azure Conditional Access framework. - Migration of endpoint and IAM systems from on-premises to cloud-only. - On-premise VM migrations to an external data center.