I design and build the whole delivery pipeline for your endpoint estate — configuration-as-code, CI/CD across GitHub Actions and Azure DevOps, drift detection, cross-tenant promotion, and point-in-time restore — then document it and hand it off so your team owns it.
Enterprise backup tools charge per-user, per-month for functionality
that belongs in your CI/CD pipeline.
typical cost reduction vs. enterprise SaaS backup tools — because it's your pipeline, not a rental
Six capabilities that give you complete Intune lifecycle management — delivered as code in your own repo.
Every policy, profile, script, and app config backed up to JSON in your GitHub repo. Runs nightly, zero manual effort.
Know exactly who changed what in the Intune console — enriched from the Microsoft Graph audit log with UPN-level attribution.
Field-level diff reports in HTML and Excel. Filter by policy type, platform, author, or assignment group. Per-commit timelines.
Compare Dev, Test, and Prod side by side. Deep-diff JSON configs, spot missing policies, flag assignment discrepancies.
Roll back to any git commit, tag, or branch. Dry-run mode previews every change. Environment approval gates protect production.
Drift alerts, pipeline results, and restore confirmations pushed directly to your Teams channels. Stay informed without the noise.
Four pipelines. One repo. Complete lifecycle coverage.
Nightly backup with audit-enriched drift detection
Field-level diff reports in HTML + Excel
Cross-environment deep JSON comparison
Dry-run, selective restore, approval gates
A scoped consulting engagement, priced to the project — not a subscription. You keep everything I build.
Assess your tenants, tooling, and goals; agree on outcomes and a fixed scope.
Stand up the config-as-code repo, CI/CD pipelines, and guardrails in your environment.
Runbooks and diagrams so the pipeline is understood — not a black box.
Train your team and transfer ownership — no lock-in, no ongoing dependency on me.
The backup, drift-detection, and restore engine at the core of the pipeline is IntuneGuard — open-source tooling I built and maintain, running as GitHub Actions in your own repo. The Intune DevOps engagement wires it into a full config-as-code delivery pipeline, adds CI/CD and promotion guardrails, then documents and hands it off. Endpoint automation & infrastructure delivery, based in Seattle.
Let's scope your Intune DevOps pipeline. No vendor lock-in — just your policies, in your repo, under your control, run like software.