{ "$schema": "https://raw.githubusercontent.com/jsonresume/resume-schema/v1.0.0/schema.json", "awards": [ { "summary": "Rethink Active Directory, Presenter. Attendance of ~50 individuals from individual contributors to executive level, hosted by Okta.", "title": "Okta User Group Sessions" } ], "basics": { "email": "ad@doering.cv", "image": "https://doering.cv/img/avatar.jpg", "label": "Senior IT Engineer", "location": { "city": "Stockholm", "countryCode": "Sweden" }, "name": "Andrew Doering", "phone": "+46 72 144 8881, +1 919 904 4396", "profiles": [ { "network": "LinkedIn", "url": "https://www.linkedin.com/in/andrewdoering" }, { "network": "Github", "url": "https://github.com/delize" }, { "network": "Blog", "url": "https://andrewdoering.org/blog" }, { "network": "Site", "url": "https://andrewdoering.org" } ], "summary": "Build identity, device management, compliance, and AI enablement systems that companies grow into, by being curious about each component of the problem, which then allows to create a long-term solution. First IT hire twice, drawn to the variety of new technologies and diverse locations each role brings.", "url": "https://doering.cv/" }, "certificates": [ { "name": "Okta Certified Administrator", "url": "https://www.credly.com/badges/ff7d747d-0b4c-41b0-bab8-299e1d0cf102/public_url" }, { "name": "Okta Certified Professional", "url": "https://www.credly.com/badges/d616f3b7-e314-43c8-8320-9c717cf16b53/public_url" }, { "date": "2024-01-01", "name": "Cisco Certified Network Professional" }, { "date": "2024-01-01", "name": "Cisco Certified Network Associate" } ], "education": [ { "courses": [ "Data Analytics", "IT Infrastructure" ], "endDate": "2015-12", "institution": "East Carolina University", "startDate": "2013-08", "studyType": "BSc in Industrial Technology" }, { "courses": [ "International Law", "Information Security", "Swedish Art \u0026 Culture" ], "endDate": "2015-06", "institution": "Linnaeus University", "startDate": "2014-08", "studyType": "Study Abroad" }, { "courses": [ "Networking Protocols" ], "endDate": "2012-01", "institution": "Wake Tech Community College", "startDate": "2009-08", "studyType": "AAS in Network Technologies" } ], "interests": [ { "name": "Snowboarding" }, { "name": "Photography" }, { "name": "Cooking" }, { "name": "Weight Training" }, { "name": "Traveling" }, { "name": "Languages" }, { "name": "Culture" }, { "name": "Visual Art" } ], "languages": [ { "fluency": "Native", "language": "English" }, { "fluency": "B2", "language": "Swedish" } ], "meta": { "canonical": "https://doering.cv/resume.json", "keywords": [ "Senior IT Engineer", "Identity \u0026 Access Management", "Okta", "Terraform", "Mobile Device Management", "Compliance", "SOC 2", "ISO 27001", "AI Enablement", "Stockholm", "San Francisco" ], "lastModified": "2026-07-05" }, "skills": [ { "keywords": [ "Okta", "SSO", "SAML", "OIDC", "APIs", "IaaC", "SCIM", "Terraform", "Hashicorp Cloud", "Github Actions", "Docker", "Google Workspace", "Google Cloud Platform", "Mobile Device Management", "Networking", "SQL (Postgres)" ], "name": "Infrastructure" }, { "keywords": [ "Hugo", "Jekyll", "HTML", "CSS" ], "name": "Web Development" }, { "keywords": [ "VS Code", "Cursor", "Bash/ZSH", "Python", "Scripting", "Git" ], "name": "Developer Tools" }, { "keywords": [ "ChatGPT", "Anthropic / Claude", "Prompt Engineering" ], "name": "Misc" } ], "work": [ { "highlights": [ "Designed and deployed Okta as the company identity provider, with SSO and SCIM across the SaaS estate (Google Workspace, Slack, Microsoft 365, AWS, Azure, Zoom, Vanta) and the Legora Platform. Managed as code through Pulumi and Terraform across production and preview tenants.", "Built an automated joiner/mover/leaver lifecycle with HiBob as the source of truth, syncing into Okta. Covers dynamic groups, automated Google Groups and email lists (replacing the old manual lists), inactivity-based deactivation, and downstream attribute mapping.", "Responsible for the Apple fleet (macOS/iOS) using Kandji and Iru MDM (Okta Device Trust, OS-update policies, self-service, 120+ iPhone restrictions), and Windows machines in Intune (BitLocker, LAPS, exploit protection). Oversaw and mentored the Jamf deployment ahead of an upcoming migration.", "Deployed Tailscale (replacing Cloudflare) using infrastructure-as-code components and GCP/AWS exit nodes. Also standardized a unified Wi-Fi configuration across offices.", "Designed IT processes around onboarding/offboarding, Lumos access requests, the 188-app software catalog, and license tracking, alongside a procurement standard requiring SSO and SCIM. Resolved over 750 IT and identity tickets along the way.", "Set up Vanta as the continuous-compliance system of record, automating SOC 2 and ISO 27001 evidence collection through API integrations (including GitHub identity sync). Worked closely with the Security team on Zero Trust and IAM.", "Wrote the company Okta, device, and identity-lifecycle runbooks, along with a self-service knowledge base and the Linear Weekly Project Updates reporting standard.", "Migrated collaboration tooling from Google Meet to Zoom, and enabled Slack EMM on mobile. Enforced managed-browser and authentication policies company-wide.", "Rolled out work phones (iPhone and eSIM provisioning) through Kandji MDM, including device recovery procedures (Activation Lock removal, remote locate) and eSIM lifecycle management." ], "keywords": [ "First IT Hire", "Operational Efficiency \u0026 Automation", "DevOps \u0026 Agile Engineering", "AI Enablement (Claude / MCP)", "Apple MDM (Kandji / Jamf)" ], "location": "Stockholm, Sweden", "name": "Legora", "position": "Senior IT Engineer", "startDate": "2025-12", "url": "https://legora.com" }, { "endDate": "2026-05", "highlights": [ "Led a globally distributed 7-person team across Support and Engineering (US \u0026 EU), with weekly 1:1s for coaching, feedback, and career development.", "Designed the Technology organization structure. Wrote 7 functional charters (Identity \u0026 Access, Applications, End-User Devices \u0026 Facilities, Help Desk \u0026 Onboarding, KM/Data/Training, AI Enablement, Security \u0026 Risk) along with 80+ position descriptions to enable scaling.", "Set up AI Enablement as a strategic function, with a composable AI stack (Notion AI, Claude Cowork, Claude Code, MCP Gateway), an L0-L3 maturity model, a Skills Library, and a Responsible AI Use policy.", "Designed an incident management framework (Slack intake, Serval triage agent, incident.io integration, IT on-call rotation), replacing ad-hoc escalation with measurable response SLAs.", "Built a 3-week hiring plan and 30/60/90-day ramp for 2-4 IT Support Consultants, designed to shift IT engineering time from reactive ticket work to strategic initiatives.", "Worked closely with Legal, Engineering, People, and Facilities leadership on cross-functional Technology initiatives spanning policy, procurement, and onboarding." ], "keywords": [ "IT Leadership", "Organizational Design", "AI Enablement Strategy", "Cross-Functional Collaboration", "Hiring \u0026 Team Building" ], "location": "Stockholm, Sweden", "name": "Legora", "position": "Interim, Head of IT", "startDate": "2026-01", "url": "https://legora.com" }, { "endDate": "2026-02", "highlights": [ "Introduced DORA-compliant Terraform configurations, which let other teams self-service their own configurations and streamline workflows.", "Led IAM operations for ~5,000 users through Okta, improving regulatory compliance and access experience.", "Built self-service processes for end users to access applications, groups, and other resources through Entitlement Management and Identity Governance, reducing Tech Support tickets by 64%.", "Set up Device Assurance, Compliance, and Posturing with Kolide, letting users self-service issues and improving security standards for external users.", "Advised EQT Ventures on due diligence and helped portfolio teams build secure user systems, including the authentication design for ADA (IVCEvidensia) using OAuth 2.0 and OIDC.", "Mentored colleagues on tools like Workato, Jamf, and Okta, helping team members earn technical certifications and pick up new skills (git, terraform, and similar).", "Championed CI/CD pipelines and Agile practices (run through Jira) to increase team velocity and improve deployment workflows.", "Reduced operational costs by over $400K through automation and tech debt cleanup.", "Standardized cross-functional processes and technical implementations across multinational environments. Examples include global cost center change workflows, and the deployment of Managed Apple IDs through Apple Business Manager, supporting regulatory alignment, centralized communication, and SSO integration.", "Guided enterprise app configurations (AARO, EBX, MRI, Slack Enterprise) with secure SSO and domain integrations, alongside modern services like Slack Enterprise Grid and Google Workspace.", "Member of the Acquisition Planning and Execution Team, helping ensure technology integration ran smoothly during transitions." ], "keywords": [ "Strategic Investment Advisory", "Operational Efficiency \u0026 Automation", "DevOps \u0026 Agile Engineering", "Enterprise Identity Management", "Self-Service \u0026 Governance", "Endpoint Assurance \u0026 Compliance", "Process Standardization", "Enterprise Application Integration", "Technical Mentorship \u0026 Training", "Acquisition \u0026 Integration" ], "location": "Stockholm, Sweden", "name": "EQT Group", "position": "Sr. Technical Operations Engineer", "startDate": "2022-11", "url": "https://eqtgroup.com" }, { "endDate": "2022-11", "highlights": [ "Wrote company policies covering Employee Lifecycle, IT Asset Management, and User Access Management. Set up processes for the IT Support team to follow.", "Led the MDM transition from Fleetsmith to Workspace ONE across the macOS fleet, completing the rollout ahead of schedule.", "Restructured Okta from MSP-managed to in-house, with Terraform underpinning it to support hyperscale and a changing company.", "Detailed Security and Process Gaps across various business lines for IPO, ITGC, and Audit Readiness." ], "location": "Stockholm, Sweden", "name": "Epidemic Sound", "position": "Sr. IT Engineer", "startDate": "2021-03", "url": "https://epidemicsound.com" }, { "endDate": "2021-08", "highlights": [ "Led business service integrations through discovery, acquisition, and close.", "Migrated services from the ThousandEyes stack into Cisco's suite, for example Google Workspace into Exchange, plus various Project Management and Collaboration tools.", "Transitioned MDM configuration from Workspace ONE to Jamf on End User Devices." ], "location": "San Francisco, CA", "name": "ThousandEyes (Part of Cisco)", "position": "Sr. IT Engineer (Cisco)", "startDate": "2020-08", "url": "https://thousandeyes.com" }, { "endDate": "2021-08", "highlights": [ "Team Lead for IT Engineering and Tier 3 Escalation Support for the IT Support team.", "Led the end-to-end device management strategy, including deployment of Workspace ONE MDM across all macOS and Windows devices.", "Developed zero-touch deployment workflows for macOS using open-source tools, which reduced provisioning time by 90% (from 200 minutes down to 20).", "Set up HR automation and identity pipelines, integrating BambooHR with Okta to remove manual onboarding steps and reduce user creation errors.", "Led the cloud-first IAM migration, deprecating on-prem Active Directory in favor of Okta, with AzureAD interoperability for the Windows fleet.", "Designed and built FedRAMP-compliant infrastructure, aligning internal systems with strict U.S. government security standards.", "Championed the global communication transformation, replacing WebEx with Zoom and launching Zoom Rooms. Drove an 85% improvement in satisfaction.", "Built out IT infrastructure for new offices in Austin, London, Dublin, and San Francisco, including networking, AV, VoIP, and vendor coordination.", "Launched company-wide security initiatives alongside the security team, one example being Google Workspace API Restrictions.", "Automated asset management using open-source tools (Snipe-IT) with cloud deployment and vendor system integration.", "Managed global vendor relationships across North America, EMEA, and APAC, covering procurement, deployment, and support operations.", "Worked across Okta, Python, Workspace ONE, macOS, Windows, Google Workspace, BambooHR, Munki, Snipe-IT, AzureAD, Zoom, and AWS." ], "location": "San Francisco, CA", "name": "ThousandEyes (Part of Cisco)", "position": "Sr. IT Engineer (ThousandEyes)", "startDate": "2017-08", "url": "https://thousandeyes.com" }, { "endDate": "2017-08", "highlights": [ "Bootstrapped IT and infrastructure operations from the ground up as the company’s first IT employee, scaling systems to support 500+ global employees across multiple offices." ], "keywords": [ "First IT Hire", "IT Leadership", "Initiative-Driven", "Cross-Functional Collaboration", "Process Builder", "Automation Advocate", "Security-First Mindset", "Compliance-Oriented", "FedRAMP Ready Enablement", "ISO 27001 Readiness \u0026 Achievement", "SOC-2 Compliance \u0026 Achievement" ], "location": "San Francisco, CA", "name": "ThousandEyes (Part of Cisco)", "position": "IT Support Engineer (ThousandEyes)", "startDate": "2016-01", "url": "https://thousandeyes.com" }, { "endDate": "2012-08", "highlights": [ "Worked in an International Traffic in Arms Regulation (ITAR) \u0026 Information Technology Infrastructure Library (ITIL) environment.", "Handle Tier 1 \u0026 2 support incidents, resolving forty incidents on a weekly basis for 3000+ employees in remote and on-site across four office locations domestically, and provide minor assistance to international office locations.", "Handle provisioning of laptops, phones, AV systems.", "Write documentation in SharePoint pertaining to improvements and break fix resolutions." ], "location": "Cary, NC", "name": "Lord Corporation", "position": "Information Systems Intern", "startDate": "2011-06", "url": "https://www.parker.com/us/en/divisions/lord-division.html" } ] }