An Apple deployment done right looks invisible to users — it just works. Done badly, it generates tickets, workarounds, and shadow IT. I design the former.

What modern means

• Declarative Device Management where supported (macOS 13+)
• Managed Apple IDs for organisations using Apple Business Manager
• Passwordless or SSO-first authentication
• User privacy respected: no overbroad MDM scoping
• Separation between personal and work data on shared devices

Scale I work with

From 20-device startups to several-hundred-device enterprises. The approach scales; the conversations just get more interesting at the bigger end.

The goal

An Apple estate you can onboard new users into in under an hour, defend to an auditor, and not think about on a Friday afternoon.

What I don’t do

I don’t handle Apple Business Manager procurement, app store purchasing, or hardware supply. This is the configuration and deployment layer — not the purchasing layer.