logo
Menu

Pagano Van Amersfoort FERRI

  • European Central Bank
  • MDM System Engineer / Administrator

Frankfurt am Main, Hesse, Germany

En résumé

I help build and secure mobile ecosystems for European institutions.

For more than 15 years, I have been working inside EU-level environments starting with OHIM (now EUIPO) and currently supporting large-scale Apple endpoint deployments for the European Central Bank.

My focus:
Designing and maintaining secure, scalable mobile infrastructures in high-compliance environments.

From building MDM platforms from scratch
to migrating enterprise fleets from MobileIron to Intune
to managing thousands of supervised Apple devices with certificate-based authentication and conditional access policies

I like to operate where mobility meets governance.

My work is defined by:

* Secure-by-design deployments
* Zero-touch provisioning (Apple Business Manager / JAMF, Intune)
* Certificate-based authentication & VPN integration
* High-availability & resilience architectures
* EU-institution compliance environments
* Bridging Windows, macOS, iOS & Android ecosystems

I thrive in multicultural, multilingual European environments and enjoy solving complex infrastructure challenges as part of strong teams.

European IT is not only about devices.
Its about trust, security, and reliability in an era where AI changes the threat landscape.



My Professional Trajectory

I started in classic IT support environments (NT, Exchange, Novell) and evolved alongside the digital transformation of European institutions.

As mobility became mission-critical, I specialized in building and securing enterprise mobile ecosystems from the ground up.

Today, I operate at the intersection of:

* European governance
* Enterprise mobility
* Endpoint security
* Secure remote access architectures

Entreprises

  • European Central Bank (via Grupo tAdded Value) - MDM System Engineer / Administrator

    Technique | Frankfurt am Main, Hesse, Germany 2023 - maintenant Supporting secure lifecycle management of several thousand Apple enterprise devices within a high-security European institutional environment.

    Scope:

    * Enterprise deployment architecture via Apple Business Manager & Microsoft Intune
    * Risk-based configuration design for differentiated exposure profiles
    * Certificate-based authentication (SCEP) & secure VPN integration
    * Environment with Conditional access enforcement
    * Internal amd third-party enterprise app deployment
    * Compliance monitoring & remediation

    Environment: high-availability, security-first institutional setting.
  • EUIPO - European Union Intellectual Property Office (via Fujitsu / IECISA) - Enterprise Mobility & Endpoint Specialist and 3rd Line IT support

    Technique | Alicante, Spain 2020 - 2023 At EUIPO, I contributed to the design, deployment, migration and secure management of institutional mobile platforms across iOS, Android, Windows,Surface Hub and macOS ecosystems.

    This included:

    • Secure remote access design
    • Identity-based access control integration
    • Migration from MobileIron to Intune
    • macOS compliance integration via JAMF
    • Governance documentation and policy alignment
    • Specialized device deployments (meeting room and operational fleets)
    • Application deployments (O365, store apps, internal LOB private store apps)

    Key achievements: • Designed full deployment models for iOS & Android (COBO )
    • Migrated MobileIron → Microsoft Intune
    • Implemented certificate-based authentication (SCEP)
    • Integrated F5 VPN gateway with conditional access
    • Implemented Mobile Threat Defense (Cisco Harmony)
    • Managed 100+ specialized meeting room devices
    • Co-managed Windows fleet (SCCM / Intune)

    Impact: Delivered secure, scalable mobility infrastructure for a multinational European institution operating in a multilingual environment.
  • EUIPO - European Union Intellectual Property Office (via IECISA) - Enterprise Mobility & Endpoint Specialist

    Technique | Alicante, Espane 2013 - 2020 Management and support/repairs of the fleet of mobile devices (initially iphones, later iPads, macs and android) using the Mobileiron (later ivanti) and Microsoft Intune platforms for the OHIM ( later renamed EU IPO) in Alicante. Worked on extending the available options for the use of mobility with remote access to approved data containers from mobile devices, single sign-on, resilience, vpns and integration with an F5.
    Designed new deployment using android COBO fully managed devices.
  • Fujitsu Europe Limited - Helpdesk Analyst

    Technique | Alicante 2005 - 2013 started as Second line help desk duties, outsourced to a spanish client, the European Office for the Harmonisation of the Internal Market,"OHIM"; Giving software and hardware support, Implementation and deployment of new technologies, analysis of problems , Liaise IT solutions in a multilingual and multicultural environment following ITIL procedures. SMS, Mobile roaming support, PDAs, Remedy, connectivity, ras, liaison with users, etc.. Later developed into Mobile Devices specialist (mobile phones, pdas, iPhones, iPads, android, Windows Mobile deployment and management, repairs), Second line support, mixed environment windows -office 2010 , as well as large inhouse development area. Multilingual Multicultural office environment, with small branches in other continents. Included Disaster recovery and High availability implementation of the MDM as well as revising authentication methods to improve user experience
  • Fujitsu Systems (Europe) Limited - Helpdesk Analyst

    Technique | Alicante 1999 - 2005 Part of the support team outsourced to the European Trade Marks and Designs Office "OHIM", this government institution of 800 employees during a period of change and migration from previous versions to windows NT4 and later to Windows XP; Performed general support activities, software installation, support both remote and local, teleworking ,e-filing, laptops, sending sms packages, VPN, pushmail, Installations,tcp/ip, some project work (compatibility IE7) etc
  • Quest International

    Ashford 1999 - 1999 Training and giving support to users following a migration to windows NT, Lotus Notes, Notes Mail, PowerPoint, Ms Access, Excel and Word in improver and advanced level, in Ashford [UK], Barcelona [Spain] and Lisbon [Portugal]
  • Alcatel Electronics - Antivirus expert

    Informatique | London 1999 - 1999 Central Installation and configuration of Antivirus Software on Novell 4.1 Servers with WFW and W95 Clients. Short Project in London/UK
  • Natwest Bank - Desktop Services/LAN Support

    Informatique | London 1998 - 1999 2nd line support for the Natwest Bank’s main offices in central London; one of the largest NT sites in Europe; Giving second line support for NT servers and workstations, troubleshooting and installing utilities and applications within the bank’s secure environment.
    Supported applications including but not limited to: email [ms exchange and ms mail] , sms , Compaq insight manager, ms office , [word, excel, access, PowerPoint,…] mainframe apps such as rumba , anti-virus software , intranet software , OS troubleshooting [Administrator privileges in NT servers and workstations] ,RAS and network connectivity [Ethernet and token ring], win install, user accounts, profiles, legacy applications, Compaq insight manager, and several others

Formations

Réseau

Pas de contact professionnel

Annuaire des membres :