Every employee has a lifecycle. I build the systems that run it.
I think about identity, endpoint management, and automation for a living. Here’s how I actually approach a problem, not just which tools I reach for.
The problem: 80 employees. 80 Macs. 45 SaaS applications. Zero automation.
About
01I work at the point where HR, IT, and security overlap — the moment someone joins, changes roles, or leaves. That moment is where most access problems start: accounts that take a week to appear, licenses nobody remembers to cancel, a laptop that’s still enrolled six months after someone’s last day.
Over 11+ years I’ve worked across the full IT stack — starting in network infrastructure, virtualisation, and server migrations, then moving into identity, endpoint, and SaaS platform engineering as organisations scaled. Along the way I’ve led infrastructure transformations (Microsoft 365 → Google Workspace, XenServer → Hyper-V), mentored technical teams, and cut annual SaaS licensing costs by roughly 30% through consolidation. Currently I own IAM and endpoint architecture for a 65+ person, remote-first organisation, building automation with Okta Workflows, n8n, and AI, and supporting ISO 27001 and SOC 2 Type II compliance along the way.
- Focus
- Identity & access management, endpoint engineering, SaaS platforms, automation & security governance
- Tools
- Okta, Kandji, Google Workspace, Atlassian Cloud, n8n, Okta Workflows, AI tooling
- Background
- 11+ years — infrastructure & virtualisation, network management, IT leadership
- Based in
- Oxfordshire, UK
- Currently
- IT Engineer at amazee.io AG
Systems I connect
02Experience
03IT Engineer · amazee.io AG
Own the IAM and macOS endpoint architecture for a 65+ user, remote-first organisation — Okta for SSO and lifecycle automation, Kandji across 70+ devices, and automation built on Okta Workflows, n8n, and REST APIs. Support the technical controls behind ISO 27001 and SOC 2 Type II.
System Administrator · Amazee Labs AG
Architected the end-to-end employee lifecycle, from onboarding through role changes to secure offboarding, and built the company’s macOS MDM environment. Reduced annual SaaS licensing costs by roughly 30% through consolidation.
Network Manager · Aspirations Academy’s Trust
Ran IT operations and infrastructure across four schools supporting 1,000+ students and staff. Led major transformations including Microsoft 365 to Google Workspace and XenServer to Hyper-V, and mentored a team of two technicians.
IT Technician · Prodrive
Supported a 400-user enterprise environment, delivering hardware, software, networking, and remote technical support while consistently meeting SLA targets.
Full text resume
04Expand plain-text resume
Professional profile
Senior IT Engineer with 11+ years of experience managing enterprise IT environments across globally distributed organisations. Specialising in identity and access management, endpoint management, SaaS ownership and optimisation, security and automation, with expertise across Okta, Google Workspace, Kandji and Atlassian Cloud. Proven experience leading IT projects, improving operational efficiency and supporting secure, compliant remote-first environments.
Core competencies
- IAM & Identity Architecture: Okta, SSO, MFA, RBAC
- Endpoint Engineering: macOS, Kandji, MDM, Security, Windows
- SaaS & Platform Engineering: Google Workspace, Atlassian, Governance, Optimisation
- Automation & Integration: APIs, n8n, Okta Workflows, AI Utilisation
- Security & Governance: ISO 27001, SOC 2, Access Controls
- IT Transformation: Systems Integration, Process Optimisation
Experience
IT Engineer — amazee.io AG (2025 – Present)
- Own the IAM architecture and identity platform for 65+ users, using Okta for SSO, application integrations, access governance and automated lifecycle management.
- Own the macOS endpoint management architecture through Kandji, covering automated provisioning, configuration, security baselines, application deployment and device lifecycle for all 70+ company devices.
- Lead the administration and continuous improvement of Okta, Google Workspace, Kandji and Atlassian Cloud, ensuring secure, scalable and reliable IT services.
- Design and implement advanced automation and integrations using Okta Workflows, n8n, REST APIs, webhooks and AI to eliminate manual processes and improve operational efficiency.
- Play a key role in the technical IT controls supporting ISO 27001 and SOC 2 Type II, including access governance, endpoint security, audit readiness and evidence management.
- Provide senior technical support across a globally distributed, remote-first environment, resolving complex identity, endpoint, SaaS and access management issues.
System Administrator — Amazee Labs AG (2022 – 2025)
- Designed and implemented the organisation’s identity and access management processes, including advanced Okta authentication policies, access controls, SSO integrations and user lifecycle automation.
- Architected the end-to-end employee lifecycle, from onboarding and automated provisioning through role changes, access management and secure offboarding.
- Engineered and managed the company-wide macOS endpoint environment, establishing MDM policies, security baselines, automated provisioning and device management processes.
- Owned and continuously improved core IT platforms and SaaS infrastructure, including Okta, Google Workspace, Atlassian Cloud and Kandji.
- Led cross-functional IT engineering projects focused on automation, workflow optimisation and adoption of new technologies, while reducing annual SaaS licensing costs by ~30% through consolidation and licence optimisation.
Network Manager — Aspirations Academy’s Trust (2019 – 2022)
- Managed IT operations and infrastructure across four schools, supporting over 1000+ students, teaching staff and corporate functions.
- Owned onsite network, server and virtualisation infrastructure, including server migrations, upgrades and virtual machine deployments.
- Delivered major infrastructure transformations, including Microsoft 365 to Google Workspace and XenServer to Hyper-V migrations.
- Led and mentored a team of two IT Technicians, establishing technical standards and maintaining a consistently high level of service.
(Junior) IT Technician — Prodrive (2014 – 2019)
- Supported a 400-user enterprise environment, delivering hardware, software, networking and remote technical support while consistently meeting SLA targets and maintaining comprehensive technical documentation.
Education & qualifications
- Automate User Lifecycle Management — Okta (2026)
- Automate Identity Security with Workflows — Okta (2026)
- Notion Advanced Badge — Notion Academy (2026)
- Level 3 Extended Diploma in ICT — Banbury OCVC (2012 – 2014)
- A*–C in Maths, English, Science and ICT — North Oxfordshire Academy (2007 – 2012)
Want to talk about identity, access, or automation?
© Callum Foulkes. Built to show how the pieces fit together.