Looking for a endpoint auto deployment expert (windows clients)

I require a windows client endpoint deployment expert.

What is required:
- a endpoint deployment solution to ensure
... - windows security updates are installed (user can only defer a short period)
... - common apps are kept updated (preferably something similar to linux deb/rpm for windows, winget?)
... - new apps can be enforced installed from central point on all endpoints
... - uninstalls can be managed

Preferred solutions:
- open source
- on premise installation of server components

your tasks?
- consultancy on solutions you know (not you read about!), we require experience knowledge not theory knowledge from google searches
- afterwards implementation of the agreed solutions
- long ongoing tasks, maintaining packages and server components
- long ongoing tasks, supporting endpoint client users in case of issues

should have:
- works for Mac clients too
- works for Linux clients

Deliveries:
- depending on solution, but scripts or images will be mandatory