Technology management
A monthly retainer that covers the whole stack: devices, identity, security, backups, and the support behind them. Standards are written down, changes go through a repo, and you always know what you have.
I make IT work for the people using it.
I'm John Beecroft, an endpoint engineer
and the founder of Camarillo Connect.
At The Trade Desk, I look after 4,000 devices and make getting set up a lot less work. Through Camarillo Connect, I help small businesses with their IT and build software for the problems they keep running into.
Ready for the first day
Slack, Zoom, Chrome, and Claude are installed. Jira, Salesforce, and Tines are bookmarked. Safari opens to one of my sites, with a different browsing order each time you replay.
Illustrative setup · sample accounts · time compressed.
Selected work.
A few projects I've put a lot of myself into: the systems I run at work, the company I started, and the software I build for clients.
-
IT AcademyPlatform overview
A place to learn.
A way to keep track.- Required trainingAssigned to each person
- Lessons & quizzesMultiple ways to learn
- Progress & managersConnected through Entra ID
IT Academy
A side project for The Trade Desk
I saw a gap in our training and built a place to close it. IT Academy brings required learning, quizzes, and individual progress together, with people and manager relationships connected to Entra ID.
What I built
A gamified learning platform used across the company. It syncs users from Entra ID, links new members to their managers at sign-up, and supports several training formats.
I designed, built, and hardened the application using Claude Code as part of my engineering workflow.
-
Getting a new hire ready
About 3 hoursUnder 30 minutesmacOSWindowsLinuxMobileProvisioning, patching, and the day-to-day work behind a 4,000-device fleet.
A better first day
Endpoint engineering and the BYOD mobile program
I built our Mac and Windows provisioning from purchase to first sign-in. New-hire setup went from about three hours to under thirty minutes. Across the fleet, patch compliance stays above 95%.
I'm also building the BYOD program for personal iPhones, iPads, and Android phones, with a clear boundary between personal and work data.
The engineering behind it
Company-owned devices
Apple Business Manager / Automated Device Enrollment (ADE), Jamf Pro, Windows Autopilot, and Intune. Baselines, app packaging, OS upgrades, and remediation automated in PowerShell, Bash, and Python, kept in Git and shipped with GitHub Actions.
Personal devices
iOS account-driven User Enrollment with Managed Apple IDs; Android Enterprise work profiles; passkey-only sign-in; two tiers of Intune App Protection (MAM), selected by enrollment-state filters; Zero Trust Level 2 baselines and compliant-device Conditional Access. The design covers data-loss prevention for copy, paste, save, print, and screenshots, with controls and platform limitations tested in the QA plan.
A rollout people can actually use
Department waves through Entra groups, guides and runbooks, a four-level rollback ladder, Jira escalations, Tines compliance notifications, and a 54-page QA plan. Offboarding uses Retire and selective wipe to remove work data.
Portnox 802.1X EAP-TLS and Entra ID connect device health to access. I work with Security on encryption, EDR, hardening, and remediation SLAs.
Try the setup walkthrough -
Clients shouldn't have to chase an update.
I built our client portal so people can see what's happening with their project, what's waiting on them, and how much consulting time they have left.
Visit Camarillo Connect
Privacy-edited reference based on the portal screenshot. Client details and project data are obscured. Follow the work
A Kanban board shows tasks moving from to do through review and done.
See the sprint
Clients can check the current sprint, upcoming work, and requests that need their input.
Know the hours
See remaining consulting hours, review time used, and purchase more when needed.
Also through Camarillo Connect: BOB
I'm delivering an AI quoting assistant for a manufacturing client. It turns incoming requests into draft job quotes, then puts them in a queue for a person to review and approve.
The deployment work includes a local open-weight model, shared browser access, and individual accounts.
Inside the portal
I built the client portal and admin console on Cloudflare Pages, Workers, D1, and KV. They cover agreements, timelines, sprints, a Kanban board, an hours ledger, receipts, and notifications.
MFA is required, passkeys are supported, and deployment is managed from Git.
-
Airports and illustrative routes. No live traffic. 
A clearer view of the ramp
Aeronis, founder and technical lead, 2022–2024
Ground teams need to know what's arriving and what's already parked. Aeronis brings camera-based aircraft identification and global ADS-B tracking into an operations platform for fixed-base operators.
I co-founded and self-funded the startup, and owned the product, architecture, and cloud infrastructure.
Explore AeronisWhat I owned
Product decisions, computer-vision ramp monitoring, global aircraft tracking, and the infrastructure behind the platform. I built the delivery pipeline with Claude Code, GitHub Actions, and infrastructure as code.
-
A website and an app for the gym
House of Gains Gym, through Camarillo Connect
I rebuilt the site for this strength gym's Oxnard and Camarillo locations, with pricing, a member portal, and an admin console. I also built its native iOS member app in SwiftUI and prepared it for TestFlight. The app currently uses a seeded mock backend, with a Supabase implementation ready to connect.
The site, app, and launch
- Pitched three distinct design directions behind access codes, each with a working member portal, so the owner could compare real experiences instead of mockups.
- Shipped the chosen direction with light and dark modes, per-location pages, pricing, FAQ, a member portal, and an admin inbox, on Cloudflare Pages.
- Built the iOS app on a GymRepository protocol so every screen talks to an interface, with a seeded mock backend today and a Supabase implementation ready to switch on.
- Bundled the brand's typefaces, wired TestFlight through a cloud build with App Store Connect keys, and cut a reveal video for the launch.
Always learning
Self-taught, and never finished learning.
Everything on this page started as something I didn't know yet. I pick up whatever the problem needs, from MDM internals to running a model on a workstation, and I get genuinely excited about new technology, AI, and ideas that change how work gets done.
Twelve years from the Genius Bar to a 4,000-device fleet.
I started at Apple: seven years diagnosing Macs, iPhones, and iPads at the hardware and OS level. Spending that much time across the counter from people taught me to explain what was happening and help them get back to their day. I still approach engineering that way, even when the work now reaches thousands of devices.
Outside my day job, I have started three very different companies. FURY Gaming, a Call of Duty esports organization I started in 2015, taught me to recruit, run, and brand a team, and carried four rosters through the Call of Duty World League to the 2019 World Championship. Aeronis, an aviation-tech startup, taught me to own product, architecture, and pipelines end to end. Camarillo Connect is where I bring that to small businesses today: IT support and software built around the way their teams work.
- Endpoints owned
- 4,000
- Fleet patch compliance
- 95%+
- New-hire setup, down from ~3 h
- < 30 min
- 2014AppleGenius, then Lead Genius
- 2015FURY GamingFounder, Call of Duty esports organization
- 2021CPI SolutionsIT Analyst II, managed services
- 2022The Trade DeskSenior IT Analyst, then Senior Systems Administrator
- 2022AeronisFounder and Technical Lead, through 2024
- 2025Camarillo ConnectFounder, IT and AI consulting
Fleet engineering by day. Secure software and practical AI the rest of the time.
What I can
help with.
Work with me
-
Endpoint and client platform engineering
Zero-touch provisioning, configuration baselines as code, patching, and app distribution across macOS, Windows, Linux, and mobile.
-
Zero Trust and identity
Entra ID conditional access, device-compliance gates, and certificate-based 802.1X so only healthy devices get in.
-
Software that solves a problem
Internal tools, client portals, and native apps. I use Claude Code daily for implementation, review, and documentation, and take responsibility for what ships.
-
IT and AI consulting
Through Camarillo Connect: fractional technology management, AI assessments and pilots, and systems projects for businesses without a CTO.
My technical toolkit
- Apple & mobile
- Jamf Pro, Apple Business Manager, ADE, account-driven User Enrollment, Managed Apple IDs, APNs, Android Enterprise work profiles, Intune compliance and App Protection (MAM).
- Endpoints & automation
- Intune, Windows Autopilot, Workspace ONE, SCCM, Linux, PowerShell, Bash, Python, Git, GitHub Actions, infrastructure as code, Cloudflare Workers.
- Identity & security
- Entra ID, Active Directory, SSO, MFA, Conditional Access, compliance gating, CIS baselines, BitLocker, FileVault, EDR, patching, and remediation SLAs.
- Cloud, networks & delivery
- Azure, AWS WorkSpaces, Cloudflare, DNS, DHCP, VPN, Portnox 802.1X, ServiceNow, Jira, ITIL, Tines, Claude Code, GitHub Copilot, and local open-weight models.
Where I've worked.
The roles behind the work, from the Genius Bar to enterprise IT and my own companies.
Jamf Certified Tech (200) and Jamf Certified Admin (300). Microsoft Azure Administrator Associate (AZ-104) and Azure Network Engineer Associate (AZ-700).
U.S. citizen. Eligible to obtain and maintain a U.S. Top Secret clearance.
-
The Trade Desk
May 2022–presentSenior Systems Administrator (IT Systems Engineer equivalent)
October 2023–presentEndpoint engineering for a 4,000-device macOS, Windows, and Linux fleet: Jamf Pro and Intune, Apple Business Manager and Autopilot, Portnox 802.1X network access, conditional access, and remediation automated in PowerShell, Bash, and Python.
Alongside the fleet work, I designed the BYOD mobile program and its rollout, documentation, offboarding, and rollback paths. I introduced Claude and Copilot to the team's scripting, review, and runbook work, and partner with Security on device posture and remediation.
Senior Information Technology Analyst
May 2022–October 2023Provisioning, onboarding and offboarding, app distribution, and OS upgrades across Windows and macOS. Administered Active Directory, Entra ID, group policy, and MDM enrollment.
-
Camarillo Connect
2025 to nowFounder and Principal Consultant
Freelance IT and AI consulting for small businesses: technology management on retainer, AI assessments and pilots, and fixed-scope systems projects. camarilloconnect.com
-
Aeronis
2022 to 2024Founder and Technical Lead
Aviation-tech startup building an operations-intelligence platform for fixed-base operators. Product, architecture, cloud infrastructure, and an AI-assisted CI/CD pipeline, alongside a co-founder. aeronis.io
-
CPI Solutions
Dec 2021–May 2022IT Analyst II
Managed service provider. Endpoints, Microsoft 365, and remote monitoring across many client environments, each with its own stack and SLAs.
-
FURY Gaming
2015 to 2019Founder and Team Manager
A North American Call of Duty esports organization. Recruited and developed four rosters across the Call of Duty World League, ran logistics for more than thirty LAN and online events, and built the brand and its community. The 2019 roster reached the World Championship, a top-32 finish out of thousands of teams. The flame still burns at furygaming.tv.
-
Apple
Mar 2014–Nov 2021Genius, then Lead Genius
Seven years of hardware and OS diagnostics across macOS, iOS, and iPadOS, working directly with customers on activation, Apple ID and identity issues, data migration, and OS deployment.
Camarillo Connect. IT and AI consulting for businesses without a CTO.
I work with small businesses across Ventura County and beyond. Sometimes that means sorting out the everyday IT. Sometimes it means building a tool that didn't exist yet. Either way, the work comes with documentation and a clear handoff.
AI consulting
Assessment first, then a pilot, then deployment. For projects that need local processing, I can run open-weight models on your own hardware.
Systems projects
Fixed-scope work in blocks of hours: migrations, network and Wi-Fi rebuilds, MDM rollouts, portals, and integrations, with a client portal that shows progress and remaining hours.