Hire expert Jeff to fix your problems.

This is the plain list. The simplest proof is the page you are on.

Built in the open

• This website, fogpie.com: named, written, pictured, and published.
• Kanati Ranch at kanatiranch.com.
• Darlene Kuhne Gallery at darlenekuhne.com.

The work

Senior Endpoint Engineer with more than twenty years keeping Windows infrastructure current, secure, and ready for an outside audit. The hands-on work is Microsoft Configuration Manager, Microsoft Intune, PowerShell, Active Directory, Group Policy, Windows Server, and patching. Configuration Manager is the product long called SCCM, and for a time MECM. Those older names still show up in job posts. The product in use is Configuration Manager.

• Monthly patch compliance held at 98.8 percent or better across more than 4,000 devices and more than 1,360 servers at Public Consulting Group, and that record supported SOC 2 audits. A large share of the server patching was done on weekends and late at night so the environment would pass if an auditor arrived the next morning.
• Designed and administered Configuration Manager for those 4,000-plus devices across more than 200 models, including operating-system deployment in more than one language, plus Active Directory, Group Policy, DNS, DHCP, Internet Information Services, and file permissions for the servers.
• PowerShell for patch validation, compliance reporting, account provisioning, and the steps that should not depend on someone remembering them.
• Service Asset and Configuration Management, the ITIL practice of knowing every asset and keeping its record true. Configuration Manager and Microsoft Intune are the tools for that work, including hybrid identity in Microsoft Entra ID and devices that live partly in Azure.
• Backup and disaster recovery, firewall and virtual private network, public key infrastructure and certificates, and tier-3 support behind a help desk.
• Artificial intelligence as daily practice, including an AI Generalist certificate: image and video generation, real-time voice, a phone assistant that can take an incoming support call, a check that a website is up and taking orders, and a short follow-up after a job. The product names change. The work is scoping it and running it.

Where

Lampasas County Government, 2023 through January 6, 2026

Information Technology Administrator, and the first full-time IT professional for the county. That job has ended.

• Modernized county Windows Server infrastructure on 2019, 2022, and 2025, and brought the Sheriff’s law-enforcement systems up to current security and compliance standards.
• Ran Active Directory, DNS, DHCP, Group Policy, and the organizational-unit layout across administration, judicial, and law-enforcement departments.
• Put patch management and PowerShell in place for servers, account provisioning, reporting, and checks.
• Designed the firewall, the virtual private network, onsite backup servers, and hybrid identity with Microsoft Entra ID.
• Led the voice-over-IP phone replacement, department software upgrades including FLEX for 911 and the Sheriff and document management, and a standard build across offices.
• Introduced ITIL-aligned change management, documentation, impact analysis, and disaster-recovery procedures.

Ingevity, 2021 to 2023

Senior IT Systems and Automation Engineer, and the Configuration Manager subject-matter expert.

• Led global endpoint configuration, operating-system deployment, patching, and compliance.
• Built PowerShell frameworks for patch validation, compliance reporting, operating-system deployment, and infrastructure management.
• Directed vulnerability remediation and automated patching so audits had something solid to read.
• Connected Microsoft Intune with Configuration Manager, including compliance, reporting, and vendor management.
• Tier-3 support for the help desk, Active Directory, Group Policy, and operating-system deployment.

Public Consulting Group, Austin, 2016 to 2021

Systems Engineer 3. This is where the 98.8 percent patch number and the 4,000 devices and 1,360 servers were kept, month after month, for SOC 2.

Earlier

• Texas Department of Aging and Disability Services, 2016: moved a statewide Configuration Manager 2007 setup onto the Current Branch release and automated operating-system deployment for large kiosk installs.
• Science Applications International Corporation (SAIC), San Antonio, 2014 to 2016: brought separate Active Directory domains into one, and moved Windows 7 to Windows 10 with zero-touch deployment. Packaged the Office move from 2013 to 2016.
• Data Recognition Corporation, Minneapolis, 2014: designed a Configuration Manager 2012 environment beside the existing one, cleaned up licensing and a large Windows Server Update Services store, and put patching in place that passed a security audit.

Reach

[email protected]
linkedin.com/in/jeffkuhne