Associate Director of Information Technology

Damian
Krzewinski

IT Leadership · Endpoint & Identity · AI-Augmented Operations

Pillar head for Systems Administration at a global digital agency — reporting to the Managing Director of IT and leading a team of four across cross-platform endpoint management (IRU on macOS, Kaseya VSA on Windows), Okta identity, security tooling, and the SaaS estate. Heavy AI-tooling user — Claude Code, Claude, ChatGPT — for scripting, ops automation, and quarterly security audits, with parallel responsibility for how the wider business adopts and governs AI tools. 15 years of measurable security and efficiency wins across UK and US enterprise environments.

15
Years in IT
$100k+
Cloud savings found
4
Direct reports
MSc
Computer Science
Get in touch View timeline → LinkedIn ↗
Damian Krzewinski
Damian Krzewinski
Assoc. Director, IT @ Huge
LocationChorley, UK
Current roleAssoc. Director, IT @ Huge
TeamPillar head · 4 reports
IndustryDigital Agency
StatusOpen to the right role
Endpoint stackIRU + Kaseya VSA
IdentityOkta + M365
AI toolingClaude Code · Claude · ChatGPT
Domainyallnow.com
AZ-900 Jamf Certified ITIL
Languages
English
Native
Polish
Native
Spanish
Beginner
01 — Skills

Stack & Specialisms

Core technologies across 15 years of enterprise IT.

Leadership & Governance
Running the Systems Administration Pillar
IT LeadershipPeople management IT strategyIT governance AI governanceStakeholder management Vendor managementSecurity audit programme ITILPost-acquisition consolidation
Endpoint Management
Cross-Platform Fleet
IRU (formerly Kandji)Kaseya VSA SophosmacOS WindowsSilent deployment Patch managementCompliance enforcement Homebrew scriptingMDM custom scripts
Identity & Security
Access, Email, Privilege
OktaOkta Workflows Microsoft Graph APIM365 licensing TenableQuarterly security audits Delinea Privilege ManagerDMARC / SPF / DKIM MimecastMFA / SSO Zero Trust
Administration & Infrastructure
Tenants & Network Ops
Microsoft 365Google Workspace Slack Enterprise GridJira AWSGCP EgnyteCato VPN Domain migrationsSplit tunnelling Active DirectoryHyper-V / VPN / DNS
Automation & AI
Scripting + AI Tooling
PowerShellBash Claude CodeClaude ChatGPTEndpoint provisioning Compliance remediationOperational automation AI governance for users
02 — Experience

Career Timeline

15 years across UK and US enterprise environments.

Huge · Digital Agency
📍 Chorley, UK · Remote
Oct 2026 — Present
Associate Director of Information Technology
  • Promoted to lead the Systems Administration pillar within Huge's IT department, reporting to the Managing Director of IT and managing a team of four.
  • Own the platforms that keep the business running day to day — identity, endpoints, security tooling and the wider SaaS estate — and set the direction for how the team builds, automates and operates them.
  • Team leadership — line management of four engineers: setting priorities, coaching, and building an automation-first operating culture.
  • Security & compliance ownership — accountable for the quarterly access-audit programme across Okta, Google Workspace, Cato VPN, Delinea, Zoom and Claude Enterprise, alongside Tenable, Mimecast and DMARC.
  • AI governance — shaping how the wider business adopts AI tools, while embedding Claude Code into the team's own day-to-day operations.
Huge (formerly Hero Digital) · Digital Agency
📍 Fort Worth, TX → Chorley, UK
May 2024 — Oct 2026
Senior Systems Administrator
  • Hired by Hero Digital in the US pre-acquisition. Supported the transition into the Huge brand before relocating back to the UK in September 2025.
  • Post-acquisition consolidation — merged Hero Digital and Huge digital infrastructure (email, Slack, Kantata, Mimecast), aligned identity management in Okta, and fixed SPF/DKIM/DMARC for newly added domains.
  • Cross-platform endpoint management — led the migration to a new Windows MDM (Kaseya VSA) and implemented a macOS MDM (Kandji, now IRU). Day to day across macOS (IRU, formerly Kandji) and Windows (Kaseya VSA) — silent software deployment, patch management, compliance enforcement, and custom MDM scripting (Homebrew bootstraps for rclone, ImageMagick, Claude Code, Git/Xcode CLT; agent scripts for Windows Updates, Node.js, VS Code, GCP CLI).
  • Built Okta Workflows automations for Microsoft 365 license management — three-tier Business / Enterprise / Teams model with Microsoft Graph API integration. Extended SCIM provisioning across multiple Okta applications and transitioned app assignments to Okta Expression Language (OEL).
  • Implemented and rolled out DMARC for hugeinc.com (SPF/DKIM alignment, phased pct enforcement); configured Delinea Privilege Manager for privileged access management, including macOS application elevation policies.
  • Security tooling & audits — Sophos endpoint antivirus administration and policy management; Tenable vulnerability management (scanning, remediation tracking, risk prioritisation); Mimecast threat protection with roles and content examination policies; quarterly IT security audits across the full estate.
  • Tenant & platform administration — Microsoft 365 and Google Workspace tenant administration; AWS and GCP for cloud-first ops; Egnyte file storage; Slack Enterprise Grid administration and migration planning; Cato VPN split tunnelling configuration; Jira for project tracking, ticket management, and IT workflow coordination.
  • AI tooling embedded in daily ops — Claude Code for endpoint scripting (IRU Homebrew bootstraps, Kaseya VSA silent installs) — with parallel responsibility for how the wider business adopts and governs AI tools.
Vari · Workspace Innovation
📍 Coppell, Texas — USA
Jun 2022 — Jan 2024
Senior Systems Administrator
  • Joined as System Administrator (Jun 2022); promoted to Senior Systems Administrator in Sep 2023.
  • Performed cloud infrastructure analysis identifying potential annual savings of over $100,000.
  • Improved Intune hardware policy compliance from 51% to 89% through new compliance policies and targeted device remediation.
  • Raised Azure Security score for Identity Management from 73% to 96%.
  • Led hybrid-to-cloud transition converting 95% of on-prem GPOs and app deployments into Intune Configuration Profiles.
  • Spearheaded company-wide passwordless authentication using Windows Hello for Business, Okta FastPass, and a full Okta policy overhaul.
  • Developed mission-critical PowerShell automations including a 500+ line automated offboarding script, post-offboarding archival after 30 days, and local admin management scripts.
  • Built Windows Autopilot with OOBE enabling direct supplier-to-employee laptop shipping — drastically reducing service desk onboarding overhead.
  • Maintained and supported on-site systems across multiple international locations (United States, Taiwan).
FI Real Estate Management · Property & Facilities
📍 Chorley, Lancashire — UK
Jan 2018 — Nov 2021
IT Team Leader
  • Performed and delivered quarterly IT security audits required by sub-company Solutus (a regulated financial institution).
  • Implemented a multi-level DR solution combining on-site Veeam with Azure Backup for full cloud replication.
  • Orchestrated and managed multiple penetration tests, phishing simulation campaigns, and group-wide security audits.
  • Became the sole escalation point for the entire group, handling 100% of escalated issues across all companies.
  • Managed a high-performing IT team supporting multiple companies and technologies whilst ensuring all SLAs and KPIs were consistently met.
  • Served as the CEO's primary point of contact for all IT strategy and operational matters.
  • Led the team through the Covid-19 pandemic and UK lockdowns, maintaining business continuity and team development goals throughout.
FI Real Estate Management · Property & Facilities
📍 Chorley, Lancashire — UK
Nov 2016 — Dec 2017
IT Infrastructure Analyst
  • Reduced the service desk queue from 1,000+ tickets down to below 20 through systematic triage and process improvement.
  • Conducted infrastructure and network surveys that became the foundation for a major infrastructure overhaul.
  • Deployed multiple Hyper-V hypervisors hosting up to 16 VMs each, replacing ageing physical servers and dramatically improving network reliability.
  • Upgraded comms room infrastructure — replaced switches and routers, rewired patch panels, and implemented multi-site Wi-Fi solutions.
  • Transitioned legacy phone system to a network-hosted FreePBX / Asterisk on-premises telephony platform.
Coral Island · Family Entertainment
📍 Blackpool, Lancashire — UK
May 2014 — Oct 2016
IT Support
  • First port of call for all system and physical IT issues across one of Blackpool's largest visitor attractions.
  • Maintained uptime and rapid response across business-critical point-of-sale and operational systems in a high-footfall environment.
03 — Education & Certifications

Qualifications

🎓
Master's — Computer Science
West Pomeranian University of Technology, Szczecin
2009 – 2012
📘
Bachelor's — Computer Science
West Pomeranian University of Technology, Szczecin
2006 – 2009
☁️
AZ-900
Microsoft Azure Fundamentals
🍎
Jamf Certified Associate
Apple Device Management
📋
ITIL Framework
IT Service Management
04 — Contact

Get In Touch

I'm not actively looking for a new role, but I'm always open to the right opportunity — whether that's a compelling challenge, a step up, or something I haven't considered yet. Happy to talk.

💼
LinkedIn
/in/damian-krzewinski
✉️
Email
[email protected]
📞
Phone
(+44) 7754193972
🌐
Website
yallnow.com