Services Projects About Get in Touch
Systems Engineer & Cloud Consultant — Leamington, ON

Infrastructure that actually works.

I'm Shawn Tavares — a systems engineer with 10+ years of enterprise IT experience helping businesses modernize, automate, and secure their environments using Azure, Intune, and PowerShell.

10+
Years in Enterprise IT
5+
Years Datacenter Mgmt
_
Scripts Deployed

Services

Specialized consulting across the Microsoft ecosystem — from cloud infrastructure to endpoint security.

☁️
Azure & Cloud Infrastructure

Design, deploy, and optimize cloud environments using Azure Virtual Desktop, Azure Arc, Defender for Cloud, and App Proxy. I help organizations modernize from on-prem to cloud-first architectures.

Azure AVD Azure Arc Defender for Cloud
⚙️
PowerShell Automation

Production-tested scripts and tooling to eliminate repetitive tasks — stale object cleanup, bulk device operations, automated reporting, and full endpoint lifecycle management.

PowerShell Microsoft Graph GitHub Actions SCCM
📱
Endpoint & Device Management

End-to-end Intune and ConfigMgr implementation — from Autopilot enrollment to compliance policies, app packaging, and lifecycle management across hybrid AD environments.

Intune Autopilot SCCM Active Directory
🔐
Security Hardening

Implement layered endpoint security using AppLocker, Microsoft Defender for Endpoint, PKI infrastructure, RADIUS/ClearPass, and Zero Trust network controls via ZScaler.

AppLocker Defender PKI ZScaler

Projects

Open-source tools, scripts, and labs — built from real enterprise experience.

01 / POWERSHELL
PowerShell Toolkit

A library of production-tested automation scripts for IT admins — including Intune bulk operations, AD stale object cleanup, SCCM collection management, and a daily-driver profile with tools like instant device purge from AD/AAD/Intune/Autopilot.

PowerShellIntuneSCCMGraph API
View on GitHub →
02 / INFRASTRUCTURE
Homelab Build

A living, documented homelab environment — starting with a Raspberry Pi and VLAN-segmented network, expanding into pfSense, Docker services (Dashy, Pi-hole, Uptime Kuma), and eventually Azure Arc integration and remote monitoring.

pfSenseDockerVLANsRaspberry Pi
View on GitHub →
03 / SECURITY
AppLocker via Intune

A documented breakdown of deploying AppLocker through Intune — covering policy design, bypass considerations, technician-safe zones, and enforcement strategies for enterprise environments. Coming soon.

AppLockerIntuneSecurity
Coming Soon →

Who I Am

I'm Shawn Tavares, a systems engineer based in Leamington, Ontario with over a decade of enterprise IT experience — including 5 years managing full datacenter infrastructure.

I've spent my career in the trenches of Microsoft environments: designing Intune rollouts, building PowerShell automation that saves hours every week, hardening endpoints against real-world threats, and migrating organizations from legacy infrastructure to modern cloud-first architectures.

North Node Tech is my consulting practice — built for businesses that need practical, experienced help with their Microsoft stack, not just generic advice.

AZ-104: Azure Administrator Associate
In Progress
10+ Years Enterprise IT Experience
Verified
5 Years Full Datacenter Management
Verified
// Cloud
Azure AVD Azure Arc App Proxy Defender for Cloud
// Infrastructure
Active Directory Intune SCCM VMware Veeam ZScaler
// Scripting & Automation
PowerShell GitHub Actions Terraform (learning) Microsoft Graph
// Security
AppLocker RADIUS / ClearPass Defender for Endpoint PKI
// Monitoring & Tools
SolarWinds ARM WatchGuard Papercut Cloudflare

Let's Work Together

Have a project, a problem, or just want to talk shop? I'm always open to new consulting engagements.

[email protected]