Andrew Doering

Profile

LinkedIn Github Blog Site

Build identity, device management, compliance, and AI enablement systems that companies grow into, by being curious about each component of the problem, which then allows to create a long-term solution. First IT hire twice, drawn to the variety of new technologies and diverse locations each role brings.

Experience

Legora

Stockholm, Sweden

Senior IT Engineer

  • Designed and deployed Okta as the company identity provider, with SSO and SCIM across the SaaS estate (Google Workspace, Slack, Microsoft 365, AWS, Azure, Zoom, Vanta) and the Legora Platform. Managed as code through Pulumi and Terraform across production and preview tenants.
  • Built an automated joiner/mover/leaver lifecycle with HiBob as the source of truth, syncing into Okta. Covers dynamic groups, automated Google Groups and email lists (replacing the old manual lists), inactivity-based deactivation, and downstream attribute mapping.
  • Responsible for the Apple fleet (macOS/iOS) using Kandji and Iru MDM (Okta Device Trust, OS-update policies, self-service, 120+ iPhone restrictions), and Windows machines in Intune (BitLocker, LAPS, exploit protection). Oversaw and mentored the Jamf deployment ahead of an upcoming migration.
  • Deployed Tailscale (replacing Cloudflare) using infrastructure-as-code components and GCP/AWS exit nodes. Also standardized a unified Wi-Fi configuration across offices.
  • Designed IT processes around onboarding/offboarding, Lumos access requests, the 188-app software catalog, and license tracking, alongside a procurement standard requiring SSO and SCIM. Resolved over 750 IT and identity tickets along the way.
  • Set up Vanta as the continuous-compliance system of record, automating SOC 2 and ISO 27001 evidence collection through API integrations (including GitHub identity sync). Worked closely with the Security team on Zero Trust and IAM.
  • Wrote the company Okta, device, and identity-lifecycle runbooks, along with a self-service knowledge base and the Linear Weekly Project Updates reporting standard.
  • Migrated collaboration tooling from Google Meet to Zoom, and enabled Slack EMM on mobile. Enforced managed-browser and authentication policies company-wide.
  • Rolled out work phones (iPhone and eSIM provisioning) through Kandji MDM, including device recovery procedures (Activation Lock removal, remote locate) and eSIM lifecycle management.
  • To see 4 more achievements, please visit the full CV online.
  • First IT Hire
  • Operational Efficiency & Automation
  • DevOps & Agile Engineering
  • AI Enablement (Claude / MCP)
  • Apple MDM (Kandji / Jamf)

Interim, Head of IT

  • Led a globally distributed 7-person team across Support and Engineering (US & EU), with weekly 1:1s for coaching, feedback, and career development.
  • Designed the Technology organization structure. Wrote 7 functional charters (Identity & Access, Applications, End-User Devices & Facilities, Help Desk & Onboarding, KM/Data/Training, AI Enablement, Security & Risk) along with 80+ position descriptions to enable scaling.
  • Set up AI Enablement as a strategic function, with a composable AI stack (Notion AI, Claude Cowork, Claude Code, MCP Gateway), an L0-L3 maturity model, a Skills Library, and a Responsible AI Use policy.
  • Designed an incident management framework (Slack intake, Serval triage agent, incident.io integration, IT on-call rotation), replacing ad-hoc escalation with measurable response SLAs.
  • Built a 3-week hiring plan and 30/60/90-day ramp for 2-4 IT Support Consultants, designed to shift IT engineering time from reactive ticket work to strategic initiatives.
  • Worked closely with Legal, Engineering, People, and Facilities leadership on cross-functional Technology initiatives spanning policy, procurement, and onboarding.
  • To see 2 more achievements, please visit the full CV online.
  • IT Leadership
  • Organizational Design
  • AI Enablement Strategy
  • Cross-Functional Collaboration
  • Hiring & Team Building

EXPERIENCE (CONTINUED...)

EQT Group

Stockholm, Sweden

Sr. Technical Operations Engineer

  • Introduced DORA-compliant Terraform configurations, which let other teams self-service their own configurations and streamline workflows. Blog Post
  • Led IAM operations for ~5,000 users through Okta, improving regulatory compliance and access experience. Okta Identity Engine
  • Built self-service processes for end users to access applications, groups, and other resources through Entitlement Management and Identity Governance, reducing Tech Support tickets by 64%.
  • Set up Device Assurance, Compliance, and Posturing with Kolide, letting users self-service issues and improving security standards for external users. Example
  • Advised EQT Ventures on due diligence and helped portfolio teams build secure user systems, including the authentication design for ADA (IVCEvidensia) using OAuth 2.0 and OIDC.
  • Mentored colleagues on tools like Workato, Jamf, and Okta, helping team members earn technical certifications and pick up new skills (git, terraform, and similar).
  • Championed CI/CD pipelines and Agile practices (run through Jira) to increase team velocity and improve deployment workflows.
  • Reduced operational costs by over $400K through automation and tech debt cleanup.
  • Standardized cross-functional processes and technical implementations across multinational environments. Examples include global cost center change workflows, and the deployment of Managed Apple IDs through Apple Business Manager, supporting regulatory alignment, centralized communication, and SSO integration.
  • Guided enterprise app configurations (AARO, EBX, MRI, Slack Enterprise) with secure SSO and domain integrations, alongside modern services like Slack Enterprise Grid and Google Workspace.
  • Member of the Acquisition Planning and Execution Team, helping ensure technology integration ran smoothly during transitions. Company Announcement
  • Strategic Investment Advisory
  • Operational Efficiency & Automation
  • DevOps & Agile Engineering
  • Enterprise Identity Management
  • Self-Service & Governance
  • Endpoint Assurance & Compliance
  • Process Standardization
  • Enterprise Application Integration
  • Technical Mentorship & Training
  • Acquisition & Integration
  • and 3 more

Epidemic Sound

Stockholm, Sweden

Sr. IT Engineer

  • Wrote company policies covering Employee Lifecycle, IT Asset Management, and User Access Management. Set up processes for the IT Support team to follow.
  • Led the MDM transition from Fleetsmith to Workspace ONE across the macOS fleet, completing the rollout ahead of schedule.
  • Restructured Okta from MSP-managed to in-house, with Terraform underpinning it to support hyperscale and a changing company.
  • Detailed Security and Process Gaps across various business lines for IPO, ITGC, and Audit Readiness.

EXPERIENCE (CONTINUED...)

ThousandEyes (Part of Cisco)

San Francisco, CA

Sr. IT Engineer (Cisco)

  • Led business service integrations through discovery, acquisition, and close.
  • Migrated services from the ThousandEyes stack into Cisco's suite, for example Google Workspace into Exchange, plus various Project Management and Collaboration tools.
  • Transitioned MDM configuration from Workspace ONE to Jamf on End User Devices.

Sr. IT Engineer (ThousandEyes)

  • Team Lead for IT Engineering and Tier 3 Escalation Support for the IT Support team.
  • Led the end-to-end device management strategy, including deployment of Workspace ONE MDM across all macOS and Windows devices. Blog Post
  • Developed zero-touch deployment workflows for macOS using open-source tools, which reduced provisioning time by 90% (from 200 minutes down to 20). Blog Post
  • Set up HR automation and identity pipelines, integrating BambooHR with Okta to remove manual onboarding steps and reduce user creation errors. Blog Post
  • Led the cloud-first IAM migration, deprecating on-prem Active Directory in favor of Okta, with AzureAD interoperability for the Windows fleet. Blog Post
  • Designed and built FedRAMP-compliant infrastructure, aligning internal systems with strict U.S. government security standards. Company Announcement
  • Championed the global communication transformation, replacing WebEx with Zoom and launching Zoom Rooms. Drove an 85% improvement in satisfaction.
  • Built out IT infrastructure for new offices in Austin, London, Dublin, and San Francisco, including networking, AV, VoIP, and vendor coordination. Example Deployment
  • Launched company-wide security initiatives alongside the security team, one example being Google Workspace API Restrictions. Source Code
  • Automated asset management using open-source tools (Snipe-IT) with cloud deployment and vendor system integration. Source Code
  • Managed global vendor relationships across North America, EMEA, and APAC, covering procurement, deployment, and support operations.
  • Worked across Okta, Python, Workspace ONE, macOS, Windows, Google Workspace, BambooHR, Munki, Snipe-IT, AzureAD, Zoom, and AWS.

IT Support Engineer (ThousandEyes)

  • Bootstrapped IT and infrastructure operations from the ground up as the company’s first IT employee, scaling systems to support 500+ global employees across multiple offices.
  • First IT Hire
  • IT Leadership
  • Initiative-Driven
  • Cross-Functional Collaboration
  • Process Builder
  • Automation Advocate
  • Security-First Mindset
  • Compliance-Oriented
  • FedRAMP Ready Enablement
  • ISO 27001 Readiness & Achievement
  • SOC-2 Compliance & Achievement
  • and 3 more

For experience prior to 2016, please view the full CV online.

Lord Corporation

Cary, NC

Information Systems Intern

  • Worked in an International Traffic in Arms Regulation (ITAR) & Information Technology Infrastructure Library (ITIL) environment.
  • Handle Tier 1 & 2 support incidents, resolving forty incidents on a weekly basis for 3000+ employees in remote and on-site across four office locations domestically, and provide minor assistance to international office locations.
  • Handle provisioning of laptops, phones, AV systems.
  • Write documentation in SharePoint pertaining to improvements and break fix resolutions.

Andrew Doering

Senior IT Engineer

References

References available upon request

References

XXXXXXXXXXXX

Colleague at EQT Group

  • Sweden

XXXXXXXXXXXXXXXXX

Colleague at Cisco, ThousandEyes

  • USA

XXXXXXXXXXXXXXXX

Colleague at EQT Group,
Manager at Epidemic Sound

  • Sweden

XXXXXXXXXX

Colleague at EQT Group

  • Sweden

XXXXXXXXXXX

Colleague at Cisco, ThousandEyes

  • Great Britain

XXXXXXXXXXX

Colleague at Cisco, ThousandEyes

  • USA