Workplaces that work.
Intune · Azure Virtual Desktop · Microsoft 365 · Azure — assess, fix and build. As code where it counts, no drama.
CV of Kris Mandemaker
Experience6
Technical leadership within the IPW Intune team. I design and standardise scalable Intune solutions for broad deployment at government clients, combined with Microsoft365DSC and rollout through Azure DevOps pipelines. Responsible for quality assurance, compliance with government guidelines, and coaching engineers and client migrations from intake to delivery.
Designing, standardising and automating modern workplace solutions on Microsoft technology. Alongside that, consultancy on existing environments: analysing and resolving pain points, independently or together with the client's team. Reusable building blocks for endpoint management, technical leadership on projects and demonstrable improvements in stability, manageability and operational cost.
Operations and further development of Azure Virtual Desktop for over 15,000 unique users per month. Strong focus on automation and scalability. Through targeted infrastructure and resource optimisations, a 60% Azure cost reduction was achieved.
Day-to-day management and modernisation of the entire IT environment. Executed migrations to Azure, Exchange Online and Azure Virtual Desktop. Designed and rolled out a new workplace based on ECM and Intune, including co-management and MDM-only scenarios.
Management and expansion of the managed RDS environment on own hardware. Onboarding of new clients, technical management and third-line support for complex incidents and changes.
Third-line support for the MSP department. Broad technical profile: Windows Server, Azure, Exchange, Linux (Debian/CentOS), VMware, Fortinet and Veeam.
Certifications4
- Microsoft · Mar. 2026
- Microsoft · Mar. 2023
- MCSA Windows Server 2016Microsoft · Jan. 2016
- LPIC-1: System AdministratorLinux Professional Institute
Exams10
- AZ-800: Administering Windows Server Hybrid Core InfrastructureMicrosoft · Apr. 2023
- SC-100: Microsoft Cybersecurity ArchitectMicrosoft · Mar. 2023
- AZ-305: Designing Microsoft Azure Infrastructure SolutionsMicrosoft · Dec. 2021
- SC-300: Microsoft Identity and Access AdministratorMicrosoft · Dec. 2021
- AZ-140: Configuring and Operating Microsoft Azure Virtual DesktopMicrosoft · Oct. 2021
- 70-412: Configuring Advanced Windows Server 2012 ServicesMicrosoft
- 70-411: Administering Windows Server 2012Microsoft
- 70-410: Installing and Configuring Windows Server 2012Microsoft
- AZ-101: Microsoft Azure Integration and SecurityMicrosoft
- AZ-100: Microsoft Azure Infrastructure and DeploymentMicrosoft
Education2
- Bachelor Business InformaticsNOVI Hogeschool · 2019–2022
- Systems & Network Administration (vocational)ROC Kop van Noord-Holland · 2009–2013
Terminal
Settings
About this device
- Device name
visitor-pc- Managed by
- Mand-IT
- Compliance
- ✓ Compliant
- Administrator
- Kris Mandemaker
- Enrolled
- 2021 · Mand-IT
Privacy & security of this site
- Trackers
- ✓ None
- Cookies
- ✓ None only localStorage for language, theme and appearance
- Third-party scripts
- ✓ None
- CSP
default-src 'self'no external sources, no frames- Headers
nosniff·frame-ancestors 'none'·Referrer-Policy- Vulnerability?
- /.well-known/security.txt
Check for yourself: securityheaders.com ↗ · Mozilla Observatory ↗
Recycle Bin
Things I throw in the bin at clients:
- Click-opsClicking around the portal by hand and hoping you'll remember it next time.
- Golden images from 2014Autopilot exists. Use it.
- PowerPoint architecturePretty pictures, no pipeline.
- "Just a quick GPO"Nothing has ever been quick with a GPO.
- Excel as CMDBTab 3 is the truth. Or was it tab 4?
- "Works on my machine"Your machine isn't going to production.
- Admin rights for everyoneConvenient. Until the first phishing mail.
- 47 Conditional Access policies without namingCA policy (3) (copy) (new) (final).
- "We've always done it this way"Not an argument, but a warning.
- Knowledge in one headEven when that head is mine: I document and hand over.
- Passwords in an Excel sheetTab "Passwords", right next to tab "CMDB".
- Service account with Global AdminPassword never expires. That is not a feature.
- "We'll do MFA later"Later is a date that never comes. Phishing does not wait.
Zero Trust Invaders
Your AVD host pool. Five session hosts, one Defender, four pipelines. How long do you stay compliant?
← → or A/D to move · space to shoot · Enter to deploy · P to pause. On a phone: drag across the field, shooting is automatic.
