Matthew Kinabrew Email & Phone Number

United States

• Expanded Jamf management by planning the addition of a DMZ-based Jamf server.• Deployed macOS 15 Sequoia upgrades using Declarative Device Management/DDM.• Hardened Mac security using macOS Security Compliance Project/mSCP and CIS benchmarks.• Developed and submitted project plans for deployments and upgrades.• Automated reports to track rollout and removal status for applications.• Identified and remedied vulnerabilities using Tenable Nessus assessments.• Monitored security agent installations using Axonius Cybersecurity Asset Management.• Coordinated projects and scheduling with other NIH engineers.• Acted as a troubleshooting escalation point for Mac-related issues.• Patched Windows systems using Microsoft Configuration Manager/MCM.

• Spearheaded Mac introduction and Jamf introduction to The Honey Baked Ham Company.• Built the organization’s primary Jamf Cloud server and a development Jamf server.• Hardened Macs using CIS benchmarks, Jamf Protect, and macOS Security Compliance Project.• Initiated Apple Business Manager/ABM enrollment and connected Jamf Cloud to ABM.• Enabled Federated Authentication/Federated Logins with Jamf Connect and Azure AD/Entra ID.• Configured Single Sign-On/SSO using Microsoft Enterprise SSO Plug-In For Apple Devices.• Implemented zero-touch provisioning using Automated Device Enrollment/ADE and Octory Pro.• Automated tasks using the Jamf API, bash scripting, Python, AppleScript, and Apple Automator.• Managed mobile devices using Jamf policies and MDM configuration profiles.• Packaged applications and integrated install scripts using Jamf Composer.• Code-signed installer packages for macOS Gatekeeper authorization.• Tested provisioning and deployments using Parallels Desktop virtual machines.• Remotely controlled macOS Ventura and Sonoma beta systems using Apple Remote Desktop.• Worked with vendors to get comparative product quotes to meet company needs.• Purchased software using Apple Volume Purchase Program.

• Introduced Octory Pro to build a more efficient and controlled provisioning process.• Facilitated NIH working with Jamf Connect team toward Azure AD Mac PIV authentication.• Automated identification/removal of 240 outdated JSS policies, 249 scripts, and 381 packages.• Scripted API calls and MySQL database queries to update information in Jamf Pro.• Created MDM profiles, bash scripts, and launchdaemons to enforce smartcard use. • Provisioned macOS 12 Monterey computers using Apple Business Manager.• Migrated NHLBI Macs to macOS-native PIV smartcard support from legacy NIHAuthPlugin.• Developed single-click Self Service policies enabling users to resolve FileVault issues.• Installed and upgraded Jamf Software Server/JSS, Apache Tomcat, and MySQL.• Authored PowerShell scripts to automatically contact any user if their Mac isn’t checking in.• Remotely controlled systems using Bomgar and Apple Remote Desktop.• Built and tested packages and policies using VMWare and Parallels virtual machines.• Tracked and resolved issues and coordinated with team members using Atlassian Jira.• Used Thycotic Secret Server to manage credentials and access.

Bethesda, Md, Us

• Built new Jamf Cloud environment and migrated Macs from ManageEngine Desktop Central.• Automated Jamf Pro software installation and corresponding Desktop Central removal.• Communicated with Apple to enroll in Apple Device Enrollment Program/DEP.• Enrolled Macs and iPads in DEP using Apple Business Manager and Configurator 2.• Taught coworkers how to use Apple Volume Purchase Program/VPP.• Made configuration profiles to apply security settings and to approve software under TCC.• Developed scripts and profiles to harden security to CIS Level 1 and Level 2 benchmarks.• Created pkg installers using Jamf Composer and deployed them using Jamf policies.• Authored Google Chrome extension to remove links from phishing emails to protect users.• Installed Chrome extensions and bookmarks through Google G Suite Admin Console.

• Pushed configuration profiles and software packages in VMWare WorkSpace ONE/AirWatch.• Worked with other engineers to help identify issues with currently deployed Macs.• Made recommendations for upgrade schedule to replace existing Mac infrastructure.

• Designed workflow and configuration profile to enable PIV-mandatory smartcard logins.• Resolved an issue that had prevented over 50% of Macs from communicating with the JSS.• Authored bash scripts to automate software updates and wireless network switching.• Remotely controlled systems using Apple Remote Desktop and Jamf Remote.• Planned and migrated all Macs from ADmitMac accounts to native Active Directory accounts.• Built Self Service policy enabling users to update to macOS 10.14 Mojave with just one click.• Automated update monitoring and downloading using AutoPkg, Git, and JSSImporter.• Developed custom CUPS printer drivers to meet organizational printing requirements.• Created deployment policies and deployed MDM configuration profiles in Jamf Pro.

• Constructed zero-touch deployment policy using Apple DEP with macOS 10.13 High Sierra.• Expanded Jamf Software Server capacity, adding load balancing and DMZ servers.• Created MDM profiles and deployed SSL certificates in Jamf Pro.• Automated email reporting of software installation and saturation statistics.• Set up JSS, Apache Tomcat, MySQL, and WebDAV on Windows Server 2012.• Utilized JIM proxy to secure LDAP communication and configured JSS to use outgoing proxy.• Developed standardized configurations for Apple Enterprise Connect and NoMAD.• Secured Macs using FileVault 2 disk encryption, PF firewall, and McAfee Endpoint Security.• Configured Citrix Receiver and NetScaler Gateway for VPN and remote access.• Integrated Jamf Pro with Intune to enforce Azure AD conditional access compliance.• Deployed Microsoft Office 2016, Cisco WebEx, and Jabber for productivity.

• Spearheaded Apple Device Enrollment Program and Volume Purchase Program enrollment.• Installed and upgraded Jamf Software Server/JSS, Apache Tomcat, and MySQL.• Migrated to Ubuntu-Linux-based JSS and Jamf NetSUS with thin provisioning.• Remotely controlled systems using Apple Remote Desktop.• Created macOS 10.12 Sierra end user self-update policy in Casper/Jamf Self-Service.• Managed patching for macOS Sierra in mixed Mac/Windows Active Directory environment.• Automated update monitoring and downloading using AutoPkg, Git, and JSSImporter.• Built pkg installers using Jamf Pro Composer/Casper Composer.• Composed bash scripts and AppleScripts and created workflows to streamline tasks.• Packaged Adobe Creative Cloud applications using Adobe Creative Cloud Packager.• Centralized printer management using Jamf Pro policies and managed printers using CUPS.

Germantown, Md, Us

• Coordinated with Jamf Professional Services to plan Jamf Casper Suite deployment.• Prepared Visio diagrams and charts to document software functionality across multiple sites.• Selected hardware and software for purchase and deployment.

• Applied DoD STIGs to harden Mac OS X 10.10 Yosemite security.• Deployed and patched applications and imaged systems using Jamf Casper Suite.• Prepared upgrade proposals for Defense Media Activity’s Mac systems.• Communicated with software and hardware vendors to get quotes.• Attended Adobe roadmap meetings and managed Adobe Creative Cloud installations.

• Provided support for Mac systems, OS X, iOS, and related technology to Marriott executives.• Trained technicians and executives in use of operating systems and applications.• Optimized VMWare and Windows 7 for virtualization on OS X 10.9 Mavericks.• Troubleshooted virtualization-related driver and network connectivity issues.• Used BMC Remedy IT Service Management/ITSM to document calls and solutions.

Ashburn, Va, Us

Us

• Designed and built dual-directory domain with Active Directory and Open Directory.• Installed servers running Windows Server 2008 and OS X Server 10.9 Mavericks with Munki.• Migrated school from Windows-only to mixed Mac/Windows environment.• Developed system configurations for and troubleshooted Windows 7, Windows 8, and OS X.• Automated tasks using bash scripting, Python, AppleScript, VBScript, and batch scripting.• Worked with vendors to get quotes and made purchase decisions with $130,000 budget.• Set up wired network devices, wi-fi, and network services including DHCP and DNS.• Remotely controlled systems using Remote Desktop/VNC and off-site using VPN.• Managed iPhone, iPad, Android, and BlackBerry devices.• Documented procedures and workflows in Visio and trained staff in technology use.• Prioritized work load and organized tasks in ServiceNow service management software.• Honored by students and co-workers with dedication of the entire 2014 school yearbook.

• Provided consulting and troubleshooting services for small and medium businesses.• Recommended products and prepared proposals to meet client needs.• Handled Windows-to-Mac and Mac-to-Windows migrations.• Repaired PCs running Windows XP and Windows Vista and Macs running Mac OS X.• Set up networks and secured firewalls.