This is the section where round two of the screen actually happens, the closing gate before an
interview hits your inbox. A recruiter takes their time here, and even at that, the current
role still drives around 95% of the result.
That tracks: nothing proves what you can run in production today like the seat you sit in
right now. To earn a "yes", the section has to hit every entry on the
IT Support role profile, one bullet per domain you named in Domain
Expertise above. Every bullet has to come off something you genuinely held in production,
never a ticket that landed on your queue.
1
End-User Support & Ticket Resolution
The flagship work of the role. Show the queue you live in, the tier-1 and tier-2 mix you
close, the average first-response and resolution times you hold, plus the CSAT score you
defend. Name the platform and the volume, not "handled tickets".
Techniques
Tier-1 & tier-2 triage
Remote diagnosis
SLA tracking
Escalation handoff
Tools
Freshservice, Zendesk, ServiceNow
TeamViewer, Bomgar, ScreenConnect
Slack, Teams ticket channels
Metrics
Tickets resolved per quarter
CSAT held
First-response time cut
2
Workstation Imaging & Deployment
How a laptop goes from a sealed box to a productive user. Show the imaging pipeline you
built, the zero-touch enrollment, and the time it takes from courier drop to first login.
Name the platform and the time-to-productive, not "deployed laptops".
Techniques
Zero-touch enrollment
Autopilot & ABM flows
Imaging standard
DEP enrollment
Tools
Jamf Pro, Mosyle
Intune, Autopilot
SCCM, MDT, PXE
Metrics
Time-to-productive cut
Devices deployed
Image drift down
3
Identity & Access Management
How every employee gets to work and how stale accounts go away. Show the SSO and directory
pair you run, the access-request workflow you built, the joiner-mover-leaver flow, and the
MFA rollout. Name the policy and what it now enforces, not "handled access".
Techniques
SSO & SCIM provisioning
Joiner-mover-leaver
MFA enforcement
Group-based access
Tools
Okta, Entra ID, JumpCloud
Active Directory, Google Workspace
Yubikey, Duo, 1Password
Metrics
Access SLA held
MFA coverage
Stale accounts cleaned
4
Endpoint Management & MDM
How every laptop stays patched, encrypted, and inventoried without an admin walking up to
it. Show the MDM platforms you run, the configuration profiles you author, and the OS or
app patch you push fleet-wide. Name the profile and the compliance rate, not "ran
MDM".
Techniques
Configuration profiles
App auto-deploy
Disk encryption
Compliance enforcement
Tools
Jamf Pro, Mosyle, Kandji
Intune, Workspace ONE
Crowdstrike, SentinelOne
Metrics
Fleet patch compliance
FileVault / BitLocker coverage
MDM enrollment rate
5
Application Support & Troubleshooting
What happens when an app misbehaves on a user's machine and the queue lights up. Show
the SaaS apps you administer, the desktop apps you package, and the troubleshooting flow
for the recurring breakage (Outlook profile, Zoom audio, VPN client, browser SSO). Name
the app and the win, not "troubleshot software".
Techniques
Log triage
SaaS admin consoles
App packaging
Browser & cert debugging
Tools
M365 / Google Workspace
Zoom, Slack, Adobe CC
Cisco AnyConnect, GlobalProtect
Metrics
Repeat tickets down
Recurring breakage retired
Self-service deflection
6
Hardware & Peripheral Support
The physical layer the rest of the office stands on. Show the laptop fleet, the
conference-room AV builds, the printer pool, and the hardware swap flow when a drive fails
on a Friday afternoon. Name the room or the platform, not "fixed hardware".
Techniques
Hardware swap & repair
AV room builds
Print server ops
Warranty management
Tools
Mac & PC laptops
Zoom Rooms, Logitech, Crestron
PaperCut, Canon, HP
Metrics
Hardware swap turnaround
AV room uptime
Print queue availability
7
Onboarding & Asset Management
How a new hire lands productive on day one and how every laptop, license, and accessory
stays accounted for. Show the onboarding wave size, the asset CMDB you maintain, the
license audit you ran, and the offboarding flow that pulls everything back. Name the
count, not "owned onboarding".
Techniques
Day-one provisioning
Asset lifecycle tracking
License audits
Offboarding recovery
Tools
Snipe-IT, Lansweeper
Workday, BambooHR triggers
Asset tags, depot logistics
Metrics
New hires onboarded
Asset reconciliation rate
License spend recovered
8
Documentation & Tooling
The setup that lets a small team support thousands of users without drowning. Show the
knowledge base you built, the user-facing self-service portal, the runbook library that
cuts tier-1 ramp, and the routine scripts (PowerShell, AppleScript, Bash) you wrote to
reclaim hours. Name the artifact, not "wrote documentation".
Techniques
Knowledge-base authoring
Self-service portal
Runbook libraries
Routine scripting
Tools
Confluence, Notion, Guru
Freshservice portal, Zendesk Help Center
PowerShell, AppleScript, Bash
Metrics
Self-service deflection
Tier-1 ramp cut
Toil hours reclaimed