👋 Hey there,

Sukhmander Singh

🚀 Senior IT Engineer | IAM / MDM / Collaboration Stack Automation

📍 San Francisco, United States

💡 Built and operated IAM/SSO (Okta), MDM (Jamf/Intune), and collaboration stacks (Google Workspace / M365) with automation (bash/Python, APIs) and vendor/SLA ownership. Enforce least-privilege, standardize onboarding/offboarding and asset lifecycle, drive audit readiness, and use metrics + post-incident RCAs to continuously improve service quality.

✨ Highlights

Automation-first approach across Okta, Jamf, Intune, and collaboration suites to reduce toil and speed delivery
Policy-as-code access mapping, self-service access requests, and auditable approvals for least-privilege IAM
Designing AI agents that answer questions and execute safe actions to reduce Tier-1/Tier-2 workload and MTTR

🛠️ Skills

A sample of the capabilities I bring to every engagement.

Okta / IAM

Jamf & Intune (MDM)

Google Workspace & M365 administration

Automation with Python / bash / APIs

Terraform / Policy-as-code

AI Agents

Agentic AI

AIOps

Incident response & RCA

ITSM workflow design

Endpoint Security & Compliance

Access Reviews / Least Privilege

Team Leadership & Incident Management

🧰 Tools & Products

Crafted accelerators ready for teams or fellow builders; to view the full list go to:

tools.sukhi.is-a.dev

Okta Data Fetcher

Open source

A modern web application that allows you to inspect Okta REST endpoints, flatten nested payloads, and export curated CSVs without leaving the browser.

IAM

Automation

Okta

CSV

Visit

Tracker

Early access

Single-user daily web tracker. Notes, todos, done, meetings, and a backlog per day. Unfinished tasks roll forward with a visible roll counter. Work-tagged items skip weekends; personal-tagged items roll every day. Designed for personal journaling, not team collaboration.

daily-journal

task-tracker

todo-list

pwa

Visit

Migration Machine

Open source

migration-machine is an open-source CLI for moving your Mac setup to a new machine without Migration Assistant or Time Machine. Capture your config on the old Mac, carry a single folder across, and provision the new one from a manifest: packages, dotfiles, macOS settings, app preferences, and encrypted SSH and GPG keys.

macos

mac-setup

mac-migration

automation

config-management

Visit

🤝 Let us collaborate

Share a little context about the work you have in mind and I will follow up promptly.

Let me know how we can create impact together.

📍 Based in San Francisco, United States