About

I'm a Staff IT Systems Engineer based in Prague, with 9+ years running enterprise IT, from hands-on desktop and AV support early on to owning MDM architecture for a 3,000+ device macOS and Windows fleet today.

At SentinelOne I lead global endpoint management strategy, architect macOS identity integrations (Okta Device Access, Platform SSO, Desktop MFA), and act as the technical escalation point for MDM incidents, working directly with vendor engineering teams. A lot of my recent focus has gone into automating compliance validation with the JumpCloud API and Intune dynamic groups instead of relying on manual audits.

Before that: IT support and infrastructure roles at Optimist Inc., Veeam Software, and Amazon, all in Prague. The throughline is enterprise device management, identity, and the automation that keeps both running at scale.

Outside SentinelOne, I co-run IT Advisory with Jan Bakalar - endpoint, identity, and IT operations consulting for teams that need the same kind of work done outside SentinelOne.