Joshua Walderbach

Systems & Infrastructure Engineer III

Engineers the endpoint platform behind ~300,000 Windows devices — owning kiosk OS architecture for 18,000+ devices, leading Windows servicing modernization, and building the internal products the team runs on. Increasingly focused on platform reliability over firefighting: preventing incidents before they reach users, not just resolving them faster.

• Developed Trellix-Cleanup, a PowerShell remediation that prevented approximately 8,000 Windows devices from becoming unrecoverable — avoiding an estimated $15.7M–$28M in hardware replacement costs
• A significant contributor to our team's objective of cutting product support tickets by 90% year-over-year — met through automation, not added staffing. Authored PowerShell imaging (OSD) automation and Intune Proactive Remediations that detect and correct configuration drift, self-healing scripts that resolve common endpoint issues before users notice them, and Knowledge Articles that raised first-contact resolution and cut escalations — attacking recurring support trends at the root instead of fixing symptoms
• Leads the technical implementation of Walmart's Windows servicing migration from SCCM to Windows Update for Business — modernizing how feature updates, quality updates, and Microsoft 365 applications reach the enterprise fleet
• Built Manage-WUfBRings, an internal PowerShell application that administers ~155 Windows Update for Business ring policies across every domain through Microsoft Graph — replacing slow, change-risky Intune portal work with safe, one-command servicing operations: enterprise-wide pause/resume of feature and quality updates, preview (WhatIf) runs, an automatic backup before every change, and one-command rollback
• Led the phased Windows 11 upgrade of 18,000+ employee-facing kiosks (HR, timekeeping, e-learning) via SCCM task sequences — diagnosing and resolving deployment failures that only surfaced at fleet scale
• Built Card Forge, an AI-powered web application that converts plain-English engineering requests into INVEST-compliant Jira stories, with human-in-the-loop approval, direct Jira integration, and Microsoft Entra ID single sign-on (SSO)
• One of 3 engineers on the Windows Engineering (OS) team trusted to approve production code — gatekeeping code quality and traceability through structured peer review
• Re-architected ~500 customer-facing in-store ordering kiosks from a Windows 10 multi-app desktop to a locked-down Windows 11 single-app full-screen experience, cutting support complexity and shrinking the attack surface
• Driving Walmart's migration of Group Policy configurations to Intune MDM — managing the Microsoft Entra ID groups that target Intune policy, Windows Autopilot enrollment, and cloud-native device configuration at scale
• Built and maintains the team's diagnostics product line — WinDAS (full-system diagnostics with interactive HTML reports), PULSE (60-second performance triage generating ServiceNow-ready work notes), and Device DNA (complete Group Policy, Intune, and SCCM configuration reporting) — plus Configuration Blender, a role-based framework that restores devices to a known-good state
• Shipped self-service configuration products adopted beyond the engineering team — Kiosk Overseer (guided Windows Assigned Access kiosk builder with real-time validation and deployment-ready XML, PowerShell, and .intunewin exports) and Portal Maker (no-code branded landing pages deployable via Intune or SCCM)
• Administers the team's GitHub organization — established repository and peer-review standards, trains engineers on Git and GitHub, and built GitHub101 (self-paced training platform with in-browser Git simulators)
• Built True Logon (tamper-resistant logon tracking with automated stale-profile cleanup on shared devices), Intune-ition (Microsoft Graph–based configuration snapshots for auditable, versioned documentation), and reusable PowerShell modules for remote administration in segmented networks
• Designed the Multi-Purpose Terminal (MPT) endpoint role, consolidating multiple business workloads onto a single managed device configuration

Systems & Infrastructure Engineer II

Recruited into Windows Engineering on the strength of automation built in the support organization — taking ownership of Intune, SCCM, Windows servicing, Windows 11 deployment, and Microsoft 365 application packaging across ~300,000 endpoints.

• Cut support-queue volume by ~65% by shipping PowerShell drift-remediation tooling and proactive Intune configuration profiles that resolved issues before they became tickets
• Orchestrated a global Intune Health Script deployment managing TLS/SSL cipher suites across ~300,000 Windows devices — partnering with Risk Management to align with Brinqa vulnerability reporting and eliminate legacy protocols
• Directed migration of virtual environments from Configuration Manager to Windows Update for Business, reducing change controls from 24 to 6 through standardized patching and a streamlined approval process
• Built a ServiceNow-to-Power BI telemetry pipeline that surfaced incident patterns and enabled data-driven prioritization of proactive remediation
• Served as cross-functional liaison between OS Engineering and Vulnerability Management teams, authoring remediation strategies, PowerShell scripts, and Intune compliance configurations
• Researched and communicated monthly patch content to Risk Management, shaping rollout strategies aligned with risk-mitigation priorities

Associate Systems Engineer

• Built WHAT (Walmart's Helpful ADE Tool) — a menu-driven PowerShell framework consolidating 30+ engineering tools into one product, standardizing support-desk procedures and reducing MTTR
• Built a PowerShell automation suite that cut average resolution time ~40% and measurably reduced ticket volume — introducing PowerShell across the support organization
• Technical lead for workstations, thin clients, printers, and virtual machines; provided advanced support for Microsoft 365 desktop applications (Word, Excel, Outlook) and mentored technicians
• Co-architected a skills-based assessment framework integrated with ServiceNow
• Implemented automated reporting that reduced escalations ~25%

Technician V → VI

Helped establish Walmart's overnight Level 2 Enterprise Operations organization from the ground up before promotion into systems engineering.

• Launched the "PowerShell in a Month of Lunches" learning series, establishing the team's automation foundation and lifting PowerShell skills across the global support organization
• Delivered global L2 support across collaboration, Microsoft 365 desktop applications, hardware, telephony, mobile, and virtualized endpoint domains — authoring SOPs that standardized troubleshooting across technology areas
• Built ServiceNow dashboards for real-time ticket-trend analysis and pioneered diagnostic utilities that became team standards
• Delivered overnight support to global distribution centers, maintaining 98% SLA compliance during high-volume windows