boot, application controls, device compliance, removable-media controls, and least-privilege configurations. Harden identity and administrative access through role-based access control, multifactor authentication, privileged-access separation, conditional access, service-account governance, and periodic access reviews. Maintain logging, alerting, time synchronization, configuration monitoring, backup protection, and security telemetry … closure plans. Identity, Endpoint, and Service Delivery Administer Active Directory and Entra ID or equivalent identity platforms, including user and group lifecycle, authentication, authorization, federation, and policy enforcement. Manage Windows, macOS, and Linux endpoints through Intune, Jamf, or equivalent tooling, ensuring secure provisioning, configuration compliance, software deployment, inventory ...