Andrew Doering
Innovative Technical Operations Engineer with a proven track record in IAM Operations, Apple & Microsoft Management, process improvement, and cost optimization.
Passionate about leveraging advanced and fledgling technologies to drive efficiency and compliance in high-stakes environments.
Experience
Legora
Stockholm, Sweden
Senior IT Engineer
Dec. 2025 - Present
- Own the entire lifecycle of Apple devices (macOS/iOS), including configuration, deployment, patching, and secure device management (MDM), via Kandji / Iru, and other open source tools.
- Drive, manage, and implement new systems and tools to support company growth and improve operational efficiency.
- Collaborate with the Security team to implement Zero Trust principles, strengthen identity and access management (IAM), and ensure compliance controls are met.
- Develop and maintain robust, scalable internal IT processes (e.g., employee onboarding/offboarding, access management, license tracking) to enhance efficiency.
- Build and deploy automation and system integrations utilizing APIs to streamline workflows and significantly reduce manual effort.
- First IT Hire
- Operational Efficiency & Automation
- DevOps & Agile Engineering
EQT Group
Stockholm, Sweden
Sr. Technical Operations Engineer
Nov. 2022 - Feb. 2026
- Introduced DORA-compliant Terraform configurations, additionally enabling other teams to self-service configurations, setups, and streamline their workflows. Blog Post
- Led IAM operations for ~5,000 users, managing Okta, achieving enhanced regulatory compliance and seamless access. Okta Identity Engine
- Implemented Self-Service Processes for End Users to access Applications, Groups, etc through Entitlement Management and Identity Governance. Resulting in a reduction of Tech Support Tickets by 64%.
- Implemented Device Assurance, Compliance, and Posturing for self-servicing issues with Kolide, enhancing security standards for external users. Example
- Advised EQT Ventures on due diligence and helped portfolio teams implement secure user systems, including authentication design for ADA (IVCEvidensia) using OAuth 2.0 + OIDC.
- Mentored colleagues on tools like Workato, Jamf, and Okta, helping team members achieve technical certifications and improve skill sets (such as git, terraform, etc).
- Championed CI/CD pipelines and Agile practices (via Jira) to increase team velocity and improve deployment workflows.
- Reduced operational costs by $400K+ using automation and tech debt cleanup.
- Standardized cross-functional processes and technical implementations, including global cost center change workflows and the deployment of Managed Apple IDs via Apple Business Manager, ensuring regulatory alignment, centralized communication, and scalable SSO integration across multinational environments.
- Member of the Acquisition Planning and Execution Team, contributing to seamless technology integration during transitions. Company Announcement
- To see 4 more achievements, please visit the full CV online.
- Strategic Investment Advisory
- Operational Efficiency & Automation
- DevOps & Agile Engineering
- Enterprise Identity Management
- Self-Service & Governance
- Endpoint Assurance & Compliance
- Process Standardization
- Enterprise Application Integration
- Technical Mentorship & Training
- Acquisition & Integration
- and 3 more
EXPERIENCE (CONTINUED...)
Epidemic Sound
Stockholm, Sweden
Sr. IT Engineer
Mar. 2021 - Nov. 2022
- Created policies for broader company pertaining to Employee Lifecycle, IT Asset Management, and User Access Management. Created processes for IT Support team to follow.
- Detail Security & Process Gaps across various business lines for IPO, ITGC, & Audit Readiness.
ThousandEyes (Part of Cisco)
San Francisco, CA
Sr. IT Engineer (Cisco)
Aug. 2020 - Aug. 2021
- Lead for business service integrations discovery, acquisition, and close.
- Integration and migrations of services from ThousandEyes' Stack into Cisco's Suite (such as; Google Workspace to Exchange, Project Management Tools, Collaboration Tools, etc).
- Transitioned MDM configuration from Workspace One to JAMF on End User Devices.
Sr. IT Engineer (ThousandEyes)
Aug. 2017 - Aug. 2021
- Team Lead for IT Engineering, and Tier 3 Escalation Support to IT Support team.
- Led end-to-end device management strategy, including deployment of Workspace ONE MDM to all macOS and Windows devices. Blog Post
- Developed zero-touch deployment workflows for macOS using open-source tools, reducing provisioning time by 90% (from 200 minutes to 20). Blog Post
- Established HR automation and identity pipelines, integrating BambooHR with Okta to eliminate manual onboarding steps and reduce user creation errors. Blog Post
- Led cloud-first IAM migration, deprecating on-prem Active Directory in favor of Okta and AzureAD interoperability for Windows fleets. Blog Post
- Designed and implemented FedRAMP-compliant infrastructure, aligning internal systems with strict U.S. government security standards. Company Announcement
- Pioneered global communication transformation, replacing WebEx with Zoom and launching Zoom Rooms, driving 85% improvement in satisfaction.
- Built out IT infrastructure for new offices in Austin, London, Dublin, and San Francisco — managing networking, AV, VoIP, and vendor coordination Example Deployment
- Launched company-wide security initiatives, hand-in-hand with security team members, for example: Google Workspace API Restrictions. Source Code
- Automated asset management using open-source tools (Snipe-IT) with cloud deployment and vendor system integration. Source Code
- Managed global vendor relationships across North America, EMEA, and APAC, including procurement, deployment, and support operations.
- Technology Used: Okta, Python, Workspace ONE, macOS, Windows, Google Workspace, BambooHR, Munki, Snipe-IT, AzureAD, Zoom, AWS
IT Support Engineer (ThousandEyes)
Jan. 2016 - Aug. 2017
- Bootstrapped IT and infrastructure operations from the ground up as the company’s first IT employee, scaling systems to support 500+ global employees across multiple offices.
- First IT Hire
- IT Leadership
- Initiative-Driven
- Cross-Functional Collaboration
- Process Builder
- Automation Advocate
- Security-First Mindset
- Compliance-Oriented
- FedRAMP Ready Enablement
- ISO 27001 Readiness & Achievement
- SOC-2 Compliance & Achievement
- and 3 more
For experience prior to 2016, please view the full CV online.
Lord Corporation
Cary, NC
Information Systems Intern
Jun. 2011 - Aug. 2012
- Worked in an International Traffic in Arms Regulation (ITAR) & Information Technology Infrastructure Library (ITIL) environment.
- Handle Tier 1 & 2 support incidents, resolving forty incidents on a weekly basis for 3000+ employees in remote and on-site across four office locations domestically, and provide minor assistance to international office locations.
- Handle provisioning of laptops, phones, AV systems.
- Write documentation in SharePoint pertaining to improvements and break fix resolutions.
Andrew Doering
Senior IT Engineer
References
References available upon request
References
XXXXXXXXXXXX
Colleague at EQT Group
XXXXXXXXXXXXXXXXX
Colleague at Cisco, ThousandEyes
XXXXXXXXXXXXXXXX
Colleague at EQT Group,
Manager at Epidemic Sound
XXXXXXXXXX
Colleague at EQT Group
XXXXXXXXXXX
Colleague at Cisco, ThousandEyes
XXXXXXXXXXX
Colleague at Cisco, ThousandEyes
- email@domain.com
- +X XX XXX XXXX
- +X XXX XXX XXXX
- Stockholm, Sweden
- American
Skills
-
Infrastructure
- Okta
- SSO
- SAML
- OIDC
- APIs
- IaaC
- SCIM
- Terraform
- Hashicorp Cloud
- Github Actions
- Docker
- Google Workspace
- Google Cloud Platform
- Mobile Device Management
- Networking
- SQL (Postgres)
-
Web Development
- Hugo
- Jekyll
- HTML
- CSS
-
Developer Tools
- VS Code
- Cursor
- Bash/ZSH
- Python
- Scripting
- Git
-
Misc
- ChatGPT
- Anthropic / Claude
- Prompt Engineering
Certifications
-
Cisco Certified Network ProfessionalExpired
-
Cisco Certified Network AssociateExpired
Languages
-
EnglishNative
-
SwedishB2
Interests
- Snowboarding
- Photography
- Cooking
- Weight Training
- Traveling
- Languages
- Culture
- Visual Art
Education
East Carolina University
BSc in Industrial Technology
Aug. 2013 - Dec. 2015
Specialization:
Data Analytics
IT Infrastructure
Linnaeus University
Study Abroad
Aug. 2014 - Jun. 2015
Specialization:
International Law
Information Security
Swedish Art & Culture
Wake Tech Community College
AAS in Network Technologies
Aug. 2009 - Jan. 2012
Specialization:
Networking Protocols
Achievements
Okta User Group Sessions
Rethink Active Directory, Presenter.
Attendance of ~50 individuals from individual contributors to executive level, hosted by Okta.