Mickey Ncube

I am a Senior Infrastructure and Modern Workplace Engineer with over 25 years of experience delivering enterprise technology solutions across cloud infrastructure, Microsoft 365, endpoint management, security, and end user computing environments.

My expertise spans Microsoft Azure, Microsoft 365, Entra ID, Intune, Jamf Pro, Windows, and macOS, with a strong focus on designing, implementing, and supporting modern workplace solutions that improve user experience, strengthen security, and enable business transformation. I have successfully delivered infrastructure modernisation projects, cloud migrations, endpoint management initiatives, and enterprise device lifecycle programmes across financial services, healthcare, managed services, and technology organisations.

Currently, I serve as the macOS and Jamf Pro Subject Matter Expert at Barclays Bank, providing third-line engineering support and technical leadership for a global estate of over 1,800 managed devices. My responsibilities include endpoint security and compliance, operating system migrations, automation, complex troubleshooting, change management, and stakeholder engagement across multiple business and technology teams.

My background includes extensive hands-on experience with Microsoft Intune, Jamf Pro, Autopilot, Apple Business Manager, Exchange Online, SharePoint Online, Teams, OneDrive, Conditional Access, MFA, Azure infrastructure, hybrid identity, Active Directory, and enterprise security controls. I have led large-scale endpoint migrations, implemented Zero Touch deployment solutions, administered cloud and on-premises infrastructure, and delivered automation using PowerShell and Bash to improve operational efficiency.

Having worked in both enterprise and managed services environments, I am comfortable operating across infrastructure, endpoint management, cloud services, and modern workplace technologies while engaging with stakeholders at all levels. I am passionate about solving complex technical challenges, driving service improvements, and delivering secure, scalable solutions that support business objectives.

macOS & Jamf Pro Subject Matter Expert — 3rd Line at Barclays Bank PLC (2025-04 – Present)

Sole macOS and Jamf Pro SME for a 1,820-device fleet spanning macOS 13–15 across EMEA, APAC, and AMER — final escalation point for all third-line Mac incidents in a large, regulated financial services environment.

• Leading end-to-end macOS 26 (Tahoe) migration: defined hardware eligibility criteria, scoped Intel-to-Apple Silicon replacement volumes, authored phased upgrade roadmap, and aligned rollout timelines with change governance and CAB.
• Led CIS benchmark compliance remediation — identifying control gaps, authoring Jamf Extension Attribute scripts for scalable policy enforcement, and aligning remediation with CrowdStrike Falcon to eliminate false positives without disrupting security coverage.
• Investigated and resolved systemic CyberArk EPM conflicts with macOS native authentication — performed authorizationdb rule analysis, identified policy override behaviours, and implemented compliant remediation without service disruption.
• Led estate-wide Mac battery drain investigation: correlated pmset events, unified logging, and sysdiagnose output with EPM agent activity across Kibana/ELK and Aternity DEX — narrowed root cause and supported vendor escalation with structured evidence.
• Manage all macOS incidents and change requests through ServiceNow within an ITIL-aligned framework; track workstreams in Jira sprints within an Agile delivery squad.

Senior Modern Workplace Engineer — Jamf & macOS Lead at Acacium Group (2022-01 – 2025-01)

Global Healthcare Staffing

• Led migration of 500+ macOS devices from Microsoft Intune to Jamf Pro across UK, Australia, and Japan — achieved 99% compliance and reduced device provisioning time by 60% through automated PreStage Enrolment and ABM workflows.
• Architected and delivered Zero-Touch Deployment for macOS using ADE via Apple Business Manager; devices enrolled, configured, and ready for use without IT physical intervention.
• Integrated Jamf Connect with Azure AD for enterprise SSO, password synchronisation, and macOS identity management — resolved complex authentication issues through authchanger configuration and IdP integration analysis.
• Delivered hands-on 2nd-line desktop support across Windows 11 and macOS estates — resolving hardware, software, and connectivity issues for end users including VIP and executive-level staff, providing white glove device setup, IMAC activities, and new starter onboarding.
• Managed SCCM and Intune imaging pipelines for laptop and desktop deployment — configured devices to organisational policy, ensuring consistent build quality and audit-ready compliance before handover to end users.
• Maintained Active Directory administration including user account management, group policy, mailbox provisioning, and O365 Exchange Admin Centre tasks across a global estate.
• Managed Apple mobile devices through Intune and Apple Business Manager — enforcing MDM compliance policies, conditional access, and device enrolment across iOS and macOS endpoints.
• Administered ServiceNow for incident and request management — created, managed, and resolved tickets end-to-end, maintaining SLA adherence and accurate CMDB and asset records for all end-user devices.
• Provided IT training and guidance to users; supported hardware and software upgrades, new product evaluation, and endpoint patching and vulnerability remediation.
• Managed Jamf Composer for macOS application packaging and deployment — scoped and distributed Microsoft Office 365, Adobe Creative Cloud, and security tooling across a global estate.
• Developed automated patch management policies maintaining 100% currency on critical security patches across the Mac fleet, reducing deployment overhead through Self Service and scoped policy architecture.
• Enforced kernel extension governance and PPPC controls estate-wide, ensuring application permissions remained locked to organisational policy and audit-ready at all times.
• Designed and enforced endpoint hardening across the Mac estate — DLP controls (USB restriction), full-disk encryption via FileVault, certificate deployment (Cloudflare.CRT/.PEM), and Jamf compliance policies aligned to enterprise security standards.
• Authored Bash automation scripts for software deployment, compliance enforcement, and device provisioning — ensuring configuration consistency across UK, Australian, and Japanese offices.
• Chaired weekly CAB meetings for macOS and Jamf change submissions; owned Major Incident and Problem Management feed for all endpoint change impacts across the estate.

Senior Cloud Engineer at AccessPoint Technologies (2020-05 – 2022-05)

MSP

• Managed enterprise M365 environments across multiple clients — Exchange Online, Teams, SharePoint Online, and Azure AD; executed hybrid Exchange migrations and Teams Voice implementations including PSTN, call queues, and auto attendants.
• Deployed Microsoft Intune and Autopilot with conditional access policies and MFA enforcement across client estates; executed AV migration from Sophos/ESET to Microsoft Defender for Business, achieving full endpoint protection coverage.
• Administered Azure AD identity management including group policy, conditional access, and MFA — ensuring compliant, secure access across hybrid environments for enterprise clients.
• Provided deskside and remote 2nd-line support across Windows and macOS endpoints — resolving hardware, software, and connectivity issues, supporting remote working users, and managing mobile device access across client estates.
• Managed user administration tasks including Active Directory users and groups, mailbox management, O365 Exchange Admin Centre operations, and Microsoft Exchange PowerShell — maintaining accurate CMDB and asset records across multiple client environments.
• Supported endpoint patching, antivirus tooling (Symantec), and vulnerability remediation using Ivanti Security Controls and Tenable; assisted with hardware/software upgrades and new product evaluation for client estates.
• Liaised with internal technology teams and external suppliers; managed incidents through ServiceNow and delivered IT guidance to end users across client organisations.
• Designed and delivered comprehensive Azure cloud solutions for enterprise clients: IaaS/PaaS deployments, VNet management, FSLogix profile containers, WVD/Windows 365 environments, and on-premise-to-Azure migrations.
• Chaired weekly CAB; documented and managed Major Incident and Problem Management workflows.

AZ-104

ITIL V3 Foundation