Navaneethakrishnan Malaiyappan
Technical Lead | Microsoft Endpoint Management Architect
Open Source Developer · Developer of Mazhai DeployFusion
Microsoft Intune · MECM/SCCM · Windows Autopilot · Entra ID · PowerShell
Experience
Devices
Automations
About Me
Architecting the Modern Endpoint Estate
I am a Microsoft Endpoint Management Architect and Technical Lead with 13+ years designing, automating, and operating enterprise device platforms — 45,000+ endpoints under management across global regions.
My work spans the full endpoint lifecycle: zero-touch provisioning with Windows Autopilot, co-managed estates bridging MECM/SCCM and Intune through Cloud Management Gateway, identity-driven security with Entra ID and Conditional Access, and compliance frameworks built on Defender, Purview, and BitLocker.
Beyond operations, I build products. I developed Mazhai DeployFusion — an open source desktop application that automates the entire SCCM & Intune application packaging pipeline — and maintain 100+ production PowerShell and Graph API automations that run enterprise infrastructure every day.
Client and employer names are withheld from this site for confidentiality. All content represents my personal views and professional experience.
Core Expertise
What I Design and Deliver
Specialist depth across the Microsoft endpoint, identity, and automation stack
Microsoft Intune
Configuration profiles, compliance policies, security baselines, MAM, and Windows Update for Business rings across Windows, Android, and iOS.
MECM / SCCM
Site architecture, co-management, Cloud Management Gateway, distribution points, OSD, and zero-downtime server migrations.
Windows Autopilot
Zero-touch provisioning with pre-provisioning, Enrollment Status Page, and region-specific deployment profiles for global user bases.
Identity & Security
Entra ID, Conditional Access, Hybrid Join, Defender, and BitLocker — identity-driven device security and data protection.
Automation & Development
100+ production PowerShell automations, Microsoft Graph API integrations, and C# / .NET desktop tooling with REST APIs and Git workflows.
Data & Reporting
Power BI dashboards, SQL Server reporting, and compliance analytics giving leadership real-time visibility into estate health.
Enterprise Impact
Impact at Scale
Outcomes delivered across enterprise environments — not job titles
Managed Devices
Enterprise endpoint estate under management across Windows, Android, and iOS — spanning AMER, APAC, and EMEA.
Infrastructure Migrations
MECM server migrations with an Active-Passive strategy, plus full on-prem to cloud infrastructure moves.
Production Automations
PowerShell and Graph API automations running daily in production — provisioning, remediation, and reporting.
Technical Leadership
Leading the endpoint management team — L3/L4 escalation, RCA, mentoring, and stakeholder-facing delivery.
Modern Workplace
Autopilot pre-provisioning, ESP, and region-specific deployment profiles for AMER, APAC, and EMEA user bases.
Product Creator
Developed Mazhai DeployFusion — enterprise packaging automation shipped as an open source product on GitHub.
Technology Stack
The Full Technology Stack
Endpoint Management
Identity & Security
Automation & APIs
Development
Infrastructure
Data & Reporting
Automation
Automation as an Engineering Discipline
100+ production automations that run enterprise endpoint infrastructure every day
Featured Projects
Products & Engineering Frameworks
Built to solve real enterprise problems — shipped, documented, and running in production
Mazhai DeployFusion
An enterprise-grade desktop application that automates SCCM & Intune Win32 app packaging, collection creation, and deployment — end to end in under 2 minutes, with zero scripting required. AI-assisted metadata and detection logic built in.
From installer to deployed app — packaging, collections, and assignment automated end to end.
Full SCCM & Intune Win32 workflow through a native desktop UI.
Claude, Gemini, and local Ollama models generate packaging metadata and detection rules.
VIP Device Blocker
Safeguard tooling that protects executive and VIP devices from bulk deployment actions, preventing high-visibility incidents.
SCCM Client Health Remediation
Self-healing framework that detects, diagnoses, and repairs broken SCCM clients automatically across the estate.
AD Collection Sync Engine
Automated synchronization of Active Directory groups to SCCM collections — eliminating manual membership management.
Power BI Reporting Framework
Reusable dashboard framework for compliance, deployment, and infrastructure health reporting to leadership.
Windows Lifecycle Automation
End-to-end automation of Windows servicing — feature update rings, readiness checks, and rollback safety nets.
IIS Compliance Framework
Automated configuration baseline and drift detection for IIS servers — hardening, auditing, and compliance reporting.
AI Engineering
AI-Assisted Endpoint Automation
Practical AI integrated into production tooling — not experiments
AI inside DeployFusion
DeployFusion integrates large language models directly into the packaging workflow — generating application metadata, detection rules, and install logic from installer analysis. Cloud models for depth, local models for air-gapped enterprise environments.
Leadership
Leading Engineers, Not Just Endpoints
Engineers Led
Technical leadership of the endpoint management team — coaching, code review, and career development.
Escalation Ownership
Final escalation point for complex SCCM, Intune, and co-management incidents — RCA and prevention.
Standards & Documentation
Implementation guides, runbooks, and documentation standards adopted as team-wide practice.
Executive Communication
Presenting service improvements, automation outcomes, and compliance metrics in management reviews.
Certifications
Credentials
Get In Touch
Let's Build the Modern Workplace
Open to senior architect and technical lead roles in endpoint management and modern workplace engineering. Based in Bengaluru, India — available for global and hybrid opportunities.