First of all you get an MDM service. Doesn’t matter which one but these days this is essentially a requirement. Some MDM’s with good reputation in macadmins community are AirWatch, Jamf, SimpleMDM, MicroMDM (open source).

You then add a couple of more components to get some more enterprise features: Munki for software distribution (free and open source), Chef or Puppet for configuration management (both free and open source) and osquery for monitoring and visibility (free and open source).