Workplaces that work.
Intune · Azure Virtual Desktop · Microsoft 365 · Azure — assess, fix and build. As code where it counts, no drama.
Available for assignments
Freelance Intune and AVD specialist. I set up Microsoft workplaces, fix what isn't working and automate the management.
As a consultant I assess your existing environment and fix problems together with your team. As an engineer I build Intune, Azure Virtual Desktop, Azure and Microsoft 365 as code, so your team can manage it without me. On this site: services, way of working, cases and CV.
Microsoft Certified: Azure Solutions Architect Expert and Cybersecurity Architect Expert (SC-100). Plus SC-300: Identity & Access. This is how security runs through everything I build →
Workplace, DevOps and consultancy: six things you call me for.
From sprawl to Intune as Code.
From cost leak to predictable.
From handwork to pipeline.
From click-ops to code.
From "it sometimes breaks" to knowing why.
From fire to fixed. On my own or alongside your team.
Also: hybrid environments, migrations, security architecture (SC-100, SC-300), tech lead for your team or a few days a week inside your ops team.
This is how I work: like a pipeline. Every assignment runs through the same stages — and prefers to fail early rather than late.
# how-i-work.yml
trigger: new-assignment
pool: { name: Mand-IT, demands: [KRIS] }
stages:
- stage: Intake # listen first
- stage: Analyse # look at what's there
- stage: FixAndBuild # fix, build, as code where it counts
- stage: SecurityGate # fail early, not late
- stage: Deploy # pipelines, no click-ops
- stage: Handover # your team carries onStart the pipeline → ContactZero Trust is not a project to me, it is a setting that stays on. Six areas, all as code, all verifiable.
Security architecture based on SC-100 (Cybersecurity Architect Expert) and SC-300 (Identity & Access), built by an Azure Solutions Architect Expert. Not a pentester, but the one who makes sure the pentester gets bored.
Promises are free. This is what actually happened.
Jumbo via Conclusion Enablement · 2022–2023
Justitiële ICT Organisatie · 2023–present
Safety Region Noord-Holland Noord · 2018–2022
Free tools for the Microsoft and Apple workplace. No login, no fuss.
Freelance Senior Workspace Consultant & DevOps Engineer
Alkmaar, the Netherlands · remote and on-site across NL
Since 2021 I work as Mand-IT for organisations that take their workplace seriously: from SMB to enterprise and central government. Half consultant, half engineer: I assess existing environments and fix what hurts — on my own or together with your team — and build what's missing as code, with the pipelines that roll it out. Before that, seven years in MSP and at a safety region — so I know what it's like to get the call at night.
My approach in four letters:
Technical leadership within the IPW Intune team. I design and standardise scalable Intune solutions for broad deployment at government clients, combined with Microsoft DSC365 and rollout through Azure DevOps pipelines. Responsible for quality assurance, compliance with government guidelines, and coaching engineers and client migrations from intake to delivery.
Designing, standardising and automating modern workplace solutions on Microsoft technology. Alongside that, consultancy on existing environments: analysing and resolving pain points, independently or together with the client's team. Reusable building blocks for endpoint management, technical leadership on projects and demonstrable improvements in stability, manageability and operational cost.
Operations and further development of Azure Virtual Desktop for over 15,000 unique users per month. Strong focus on automation and scalability. Through targeted infrastructure and resource optimisations, a 60% Azure cost reduction was achieved.
Day-to-day management and modernisation of the entire IT environment. Executed migrations to Azure, Exchange Online and Azure Virtual Desktop. Designed and rolled out a new workplace based on ECM and Intune, including co-management and MDM-only scenarios.
Management and expansion of the managed RDS environment on own hardware. Onboarding of new clients, technical management and third-line support for complex incidents and changes.
Third-line support for the MSP department. Broad technical profile: Windows Server, Azure, Exchange, Linux (Debian/CentOS), VMware, Fortinet and Veeam.
Send a message on LinkedIn — I reply within one business day. Remote and on-site in the Netherlands, for an assessment, a stubborn problem, a build project or a few days a week inside your team.
Or type sudo hire kris in the terminal.
Found a vulnerability on this site? See security.txt. I respond, and I say thank you.
visitor-pcdefault-src 'self' no external sources, no framesnosniff · frame-ancestors 'none' · Referrer-PolicyCheck for yourself: securityheaders.com ↗ · Mozilla Observatory ↗
Things I throw in the bin at clients:
Your AVD host pool. Five session hosts, one Defender, four pipelines. How long do you stay compliant?
← → or A/D to move · space to shoot · Enter to deploy · P to pause. On a phone: drag across the field, shooting is automatic.
Pinned
Kris MandemakerAvailable for assignments