Senior Systems & Infrastructure Engineer · Walmart Global Tech · Northwest Arkansas

Joshua Walderbach

I build the platforms and automation that keep enterprise Windows running.

I engineered the endpoint platform behind ~384,000 managed Windows devices, and now work on the Azure Virtual Desktop team.

See selected work Résumé (PDF)

LinkedIn

~384K Managed Windows endpoints on the platform I engineered
54K Windows kiosks I led, with architecture and approval authority
$18M–$24M Estimated hardware replacement avoided by one remediation (~10,000 devices, hardware only)

About

My work sits where endpoint management meets software engineering. I shipped the internal products other engineers ran the platform on and led the servicing modernization from SCCM to Windows Update for Business.

My focus is platform reliability: proactive, self-healing systems that prevent incidents instead of reacting to them, built increasingly with AI-assisted workflows behind a human approval gate — the model drafts, an engineer decides.

Selected Work

  1. Remediation · Public

    Trellix-Cleanup

    Problem
    A failed Trellix DLP uninstall left orphaned hdlpdbk filter drivers that killed network and USB, pushing affected Windows devices toward an unrecoverable state.
    What I built
    A PowerShell remediation deployed through Intune Proactive Remediations, with backup, rollback, and WhatIf preview so the change was safe to run at fleet scale. The code is public.
    Outcome
    About 10,000 devices saved from becoming unrecoverable — an estimated $18M–$24M in avoided hardware replacement.

  2. Platform tooling · Internal

    Windows servicing control plane

    Problem
    About 155 Windows Update for Business ring policies spanned every domain; pausing or resuming an update meant hand-navigating hundreds of them in the portal.
    What I built
    An internal PowerShell application that administers those policies through Microsoft Graph, with enterprise-wide pause and resume of feature and quality updates, WhatIf previews, automatic backups, and one-command rollback.
    Outcome
    Portal-based, change-risky servicing became one-command servicing with a built-in safety net.

  3. Self-service product · Public

    Kiosk Overseer

    Problem
    Windows Assigned Access means hand-crafting multi-namespace XML, obscure Edge kiosk arguments, and manual Start-menu shortcuts.
    What I built
    A browser-based builder with three kiosk modes and 40+ app presets that validates in real time and exports deployment-ready XML, PowerShell, and .intunewin packages, fully client-side.
    Outcome
    A specialist XML task became a guided workflow anyone on a team can run, and the tool earned recognition in the Microsoft Intune practitioner community.

Experience

Walmart Global Tech

August 2018 – Present

October 2026 – Present

Senior Systems & Infrastructure Engineer

Azure Virtual Desktop team

Promoted to Senior and moved to the Azure Virtual Desktop team after five years on Windows Engineering (OS).

  • Reviews, approves, or rejects change controls submitted within the organization group.
November 2023 – October 2026

Systems & Infrastructure Engineer III

Windows Engineering (OS) team

Engineered the endpoint platform behind ~384,000 Windows devices on Windows Engineering (OS).

  • Redesigned the global servicing schedule, lifting monthly patch compliance from under 50% to over 90%.
October 2021 – November 2023

Systems & Infrastructure Engineer II

Windows Engineering (OS) team

Recruited into Windows Engineering on the strength of automation built in the support organization.

  • Cut support-queue volume ~65% with PowerShell drift-remediation tooling and proactive Intune configuration profiles.
  • Orchestrated a global Intune health-script deployment managing TLS/SSL cipher suites across ~384,000 Windows devices.

Full CV, including earlier roles back to 1996

Engineering Philosophy

I treat endpoint engineering as software engineering. These are the principles behind how I build.

Build products, not scripts

A script solves a problem once, for the person who wrote it. A product solves it for everyone, repeatedly, with the author out of the loop.

Automate the work away, then measure it

The point of automation isn't a faster ticket queue; it's an empty one. If I can't measure the outcome, the work isn't finished.

Read all eight principles

Contact

Questions about my work, or want to compare notes on endpoint and platform engineering? Get in touch.

Email me Download résumé (PDF)

LinkedIn GitHub

Off the clock: drone pilot · voice actor · dog dad · maker