Engineering teams running Linux on the metal need the same fleet discipline as their Apple users — encryption, identity integration, and a config baseline they can audit. I provide that, without the datacenter overhead.

What I cover

• LUKS full-disk encryption with key management
• Entra ID or Okta SSO integration via SSSD, Kerberos, or PAM modules
• CIS-aligned hardening for Ubuntu and Fedora/RHEL
• Ansible or shell-based configuration as code
• Osquery or similar for fleet visibility

What I don’t do

I don’t manage large Linux server estates — this is endpoint-focused. Workstations and laptops for engineering teams, not datacentre ops.

Typical context

An Apple-first company that’s added a handful of Linux users and needs them managed with the same rigour. Or a security-conscious startup building their fleet baseline from day one.