Hamza Khan
I keep the lights on for the people who keep the lights on for everyone else. Currently administering systems at Vestwell in New York — Google Workspace, JumpCloud, Meraki networking, and a fleet of about 1,000 Mac devices that mostly behave themselves.
System Info
I'm a Systems Administrator based in New York, currently at Vestwell, where I look after the tools that let a hybrid workforce actually get work done — identity and access management (IAM), endpoint automation, cloud networking, and the kind of process automation that keeps all of it from needing me at 2am.
Before that I led IT engineering at TheGuarantors, ran the full IT lifecycle at ZGF Architects, and started out doing hands-on desktop support and networking. Along the way I've led security hardening and compliance work through SOC 2 audits, built patch management and endpoint automation pipelines from scratch, and migrated more people onto SSO than I can count.
I like systems that fix themselves before anyone notices they were broken.
Deployment Log
- Administer Google Workspace, Zoom, Slack, Atlassian Jira/Confluence, and 1Password across the org, and run JumpCloud as lead admin.
- Built and maintain Zoom Rooms, plus Meraki networking and Windows endpoint management inside VDI environments.
- Automated recurring IT tasks and infrastructure deployment for a hybrid workforce, cutting manual work and improving turnaround.
- Maintain a fleet of roughly 1,000 macOS devices while holding the line on hardware and security compliance.
- Led enterprise rollouts of Duo Security, Okta, and Google Workspace, with white-glove onboarding/offboarding for every employee.
- Scaled endpoint patch management using AutoPkg and built a full-cycle patch and software distribution framework.
- Guided the company through SOC 2 Type 1 and Type 2 audits successfully.
- Managed JAMF, Intune, and Rippling MDM, integrated apps with Okta SSO, and rolled out KnowBe4 phishing simulations.
- Owned the full IT support lifecycle, from new-hire orientation to troubleshooting across a wide device and comms fleet.
- Ran the helpdesk ticketing system and mentored a growing desktop support team.
- Wrote the frameworks that improved support processes and drove a new IT strategic plan aligned to firm goals.
- Maintained VMware and SAN infrastructure and managed a chunk of the desktop support technology budget.
- Installed and configured hardware, software, and network devices, and managed licenses for Microsoft 365, AutoCAD, and Adobe.
- Delivered IT training and remote support, and streamlined operations through new policies and procedures.
- Provided networking and desktop support, managed Active Directory, and trained staff on Microsoft Office.
- Built and maintained a database system that improved day-to-day data management.
Running Processes
Okta · Duo · JumpCloud · Active Directory · JAMF · Intune · Rippling MDM · AutoPkg · Azure · VMware · Meraki · Cisco · TCP/IP · Google Workspace · Slack · Teams · Atlassian (Jira/Confluence) · Zendesk · Freshworks · Vanta · KnowBe4
Off the Clock
When I'm not keeping a thousand Macs alive, I'm usually courtside energy at Madison Square Garden cheering on the Knicks — this one was Game 3 of the NBA Finals.
Turns out watching a team try to recover from a rough patch under pressure isn't so different from watching a production incident channel at 6pm on a Friday.
Education
Get in Touch
Open to hearing about interesting infrastructure, automation, or IT leadership opportunities. Fastest way to reach me is email.