Expert help with platform strategy, device management, and deployment best practices. Built for enterprises, small businesses, schools, and individuals who just want their devices set up right — Foundation (enrollment), Baseline MDM (managed basics), Advanced MDM (complex deployments), Strategic Advisory (planning), Recurring Support (ongoing help), Web Design & Hosting, and AI & Automation.
500,000+ Apple devices deployed and supported since 2010
What I do
39 services · 7 categories
End-to-end Apple expertise, from individuals and families to schools, hospitals, small businesses, and enterprise-scale fleet management, from first deployment onward.
Looking for a website instead? Jump to Web Design & Hosting →
Get devices enrolled and managed, correctly, from day one.
Ongoing managed baseline for a growing fleet.
Full-stack deployment for complex, multi-platform environments.
Roadmap, migration, training, and cross-platform deployment infrastructure, on demand. No ongoing MDM management required.
Monthly retainer covering whichever tier you're on. Priority response, quarterly review, and staying current with OS and platform changes.
Applies to whichever tier you're already on. Doesn't apply to Web Design & Hosting.
Learn more →Not device management. Website design, hosting, and domain handled end to end.
Learn more →Scripted, API-driven automation for anything reachable from a Mac — not limited to Apple, Jamf, or MDM. If it has an API, a CLI, or some other way to talk to it, it's fair game. Small scripts and tools, not full apps or hosted infrastructure. Actively building out real projects — tell me what you'd like automated and I'll scope it.
Learn more →Where I help
Apple Business
Apple Business removes friction from device deployment. Automated enrollment means users receive a fully configured device, with MDM, PSSO, and apps installed automatically, without IT ever touching it.
Mobile Device Management
Whether you manage 10 Macs or 10,000 iPhones, the right MDM strategy makes the difference between chaos and calm.
Enterprise
At enterprise scale, best practice only works if it's consistent. The same standards applied the same way across every site, every device, and every rollout, not just the first one.
Expertise
Technologies I work with every day.
Ecosystem
Partnerships are in progress — this space fills in as they're finalized.
Coming Soon
What clients & colleagues say
Excerpted from written recommendation letters.
Client Director
“The large-scale mobility programs in place today are solely due to Marek's expertise and determination to create solutions that add value for our top tier enterprise clients… Over 41,000 iOS devices configured. Approximately $23M in iOS device/services in the last 2 years.”
Solutions Specialist
“Marek has been irreplaceable in his efforts when it comes to the Apple environment our customers rely on… With Marek's support we were able to win a second hospital location for 3,000 iPhones… Marek is an extraordinary resource with a depth of knowledge many of us rely on.”
Account Manager
“Marek has played a critical role in helping support the process of a large iPhone deployment of ~4,000 phones ($3M Project) being leveraged as clinical devices for nurses… knowledgeable, patient, and helpful.”
Engineer, Integration Center
“His approach to leveraging different tools and systems to automate the provisioning of the Apple Mobility ecosystem transformed our provisioning process from a labor intensive workflow into a more automated, streamlined and cost effective one.”
Regional Solution Sales Director
“Marek has been key to launching new programs for our podium accounts, engineering new methods to increase efficiencies and operational velocity, and generating millions of dollars in revenue and contribution across a number of accounts.”
Vice President of Sales
“Marek is one if not the best I have ever worked with when it comes to engineering solutions that fit the business, and will stand the test of time… He developed the methodology that is used to currently produce between 1,000-1,400 devices output daily.”
Beyond the work
Active in the Apple admin community — macOS Admins and JNUC, and the people who build this stuff every day.
Recent work
Every service, and who it's been delivered for. Click one to see the client(s).
How it works
Automated Device Enrollment (ADE) means a Mac or iPhone is supervised and configured the moment a user switches it on. No IT hands-on required.
ADE Flow, from purchase to productive
01
Purchase
Bought from Apple or authorised reseller
02
Apple Business
Reseller links device to your AB account
03
MDM Assignment
IT assigns device to MDM server in AB
04
Unboxed
User powers on & connects to network
05
APNs
Activation/Enroll
06
Ready
Apps & policies installed silently. Work-ready.
Zero-touch — IT never physically handles the device Supervised/Managed — full AB & MDM control from day one Secure — profiles signed by Apple
Process
01
We talk through your current setup, pain points, and goals. 30 minutes, no commitment.
02
A clear proposal. What will be done, how long it takes, and what it costs. No surprises.
03
I work directly in your environment, not through layers of account management.
04
Everything is documented so your team can own it going forward.
About
Zero Touch Consulting got its name from Apple's own idea of “zero-touch” deployment: a device ships to someone and configures itself, with no IT hands required.
Funny thing to name a company after, considering I've spent years watching organizations with tens of thousands of devices make that “zero-touch” process happen completely by hand.
Truth in advertising: nothing is actually zero touch. Someone still has to sit down and build the automation that lets everyone else not touch anything. That's me.
I never had a mentor coming up in this field, so I taught myself. I still make up for that by chasing every macOS Admins and JNUC event I can get to, attending Apple workshops whenever they're within reach, and trading ideas with admins who think differently than I do.
One of those people was Tim, who runs Twocanoes. I was watching him do things with devices and provisioning tools that genuinely mesmerized me. Then I found out he lives 15 minutes from me. So, I introduced myself. Turns out one of the sharpest people I know in this space is practically my neighbor. Thanks, Tim.
These days, I'm also deep into learning how to use AI properly. It's another tool, a very smart one, and probably the first technology I've encountered in a while with more potential than I've had time to explore.
But underneath all the technology, automation, and scale, there's a simple reason I do this. I've always believed in sharing what I know. I had to mentor myself because I didn't have that option, so now I try to be that option for others.
Zero Touch Consulting is that belief formalized: practical advice for anyone deploying Apple devices, building something cool and exciting, or figuring out how to turn an idea into something real. Because at the end of the day, it's not really about how many devices you can automate. It's about helping people solve problems, learn something new, build something better and enjoy life. Zero Touch Consulting, one customer at a time.
View LinkedIn profile →FAQ
Straight answers about tiers, services, and how engagements actually work.
Apple ecosystem specialist (Jamf Pro), not locked to one vendor. I can work within whatever MDM you already run if migration isn't the goal.
Tiers bundle scopes, and services are the individual building blocks. You can buy them standalone too.
Recommended but not required. Skipping it means we audit existing AB/identity config first, which may add scope.
Both. FileVault and firewall come with the Tier 2 baseline. Tier 3 adds Security Baseline on top, with Microsoft Defender for endpoint detection and VPN for secure network access. Formal compliance auditing and certification reporting are not part of the current service list.
Migration planning and advisory is part of Tier 4 (Technical Advisory). It covers mapping enrollment, policies, and app assignments to the new platform, and sequencing the cutover. The hands-on rebuild in the destination MDM is scoped separately as Tier 2 or Tier 3 work.
No. It is a separate, non-recurring line item, unrelated to MDM and device tiers. Purchasable on its own, and scoped to local/private clients and small businesses.
Yes. Remote-first, nationwide and worldwide. Time-zone overlap is handled during the discovery call. Payments via Mercury.
Depends on scope. Discovery call first, then a proposal, then a SoW once you agree. Tiers 1–4 are structured hourly and run on prepaid blocks of hours, topped up before the block runs out. Recurring Support is a flat monthly fee, and Web Design & Hosting is a monthly hosting/maintenance fee plus a one-time domain reservation fee (1–10 year options, subject to availability). Contact me for Web Design pricing.
Card, Apple Pay, Google Pay, ACH, or wire — all on one Mercury invoice, whichever is easiest for you. Invoices are due on receipt. SoW work is billed in three milestones: a deposit before work starts, one at the midpoint, and the balance on completion. Work begins once the deposit clears, and handover — deliverables, documentation, and admin credentials — happens once the final invoice clears. Recurring Support and hosting are billed monthly in advance.
Optional monthly retainer covering whichever tier you're on — nothing you're required to add. Priority response, quarterly review, and staying current with OS and platform changes. It doesn't apply to Web Design & Hosting.
Use the contact form below. Pick the packages or services you're interested in and send a message. You'll get a reply directly from Marek, not a sales queue.
MDM overhaul, fresh deployment setup, or just a second opinion. Get in touch.