Client: Construction & Engineering Group (Multi‑site Operations)
Location: Toronto HQ, Mississauga Branch, Multiple Remote Job Sites
Duration: 7 Weeks | Team Size: 2 Endpoint & Cloud Engineers

Overview:

Tasked with streamlining endpoint management for a fast-growing construction firm with multiple offices and job sites, this project focused on leveraging Microsoft Intune and Windows Autopilot to build a scalable, secure, and compliant endpoint infrastructure. The client needed faster device onboarding, reduced provisioning workload, and improved visibility for IT leadership and auditors.

Key Deliverables:

• Windows Autopilot Rollout for Zero-Touch Deployment:
  Deployed Windows Autopilot to provision 85+ devices across all locations with Azure AD Join, eliminating the need for manual imaging and enabling new hires to be productive on Day One.
• Intune Device Compliance & Security Baseline Enforcement:
  Created compliance policies to automatically enforce BitLocker encryption, Secure Boot, and up-to-date antivirus protections, ensuring devices remain secure and audit-ready.
• Microsoft Defender for Endpoint Integration:
  Integrated Defender for Endpoint with Intune to correlate real-time device health, malware detections, and risk scores—improving threat visibility and reducing response times.
• Mobile Application Management (MAM):
  Applied MAM policies to secure mobile access for field staff, restricting data access and app behavior on BYOD devices while maintaining a user-friendly experience.
• Corporate App Deployment:
  Packaged and deployed critical apps such as Bluebeam, Autodesk, and internal utilities through Intune, ensuring version consistency and compliance with licensing.
• Executive Reporting via Power BI Dashboards:
  Built custom Power BI dashboards to display provisioning status, compliance trends, and endpoint health metrics, giving IT and leadership a real-time compliance overview.

Business Impact:

• Device provisioning time dropped from 2+ hours to under 15 minutes per unit, enabling rapid deployment at job sites and remote offices.
• Provisioning-related support tickets reduced by 60%, freeing up IT staff for higher-value work.
• Improved audit readiness with consistent compliance enforcement and historical tracking of endpoint health.
• Increased end-user satisfaction through faster onboarding and reliable access to essential tools and apps.