Well you've come to the right place, Jamf is the best.

Check out this article to get started - https://www.jamf.com/resources/e-books/zero-touch-apple-device-deployments-for-beginners/

Might want to contact your Jamf Buddy for some advice as well, They're great people & very helpful.

Can a DMG file be run from webserver ? if yes, we can run imaging from webserver

@sunil.bollineni yes you can and many do:

MDS
lnstallr
bootstrappr

Because of adamantium infrastructure constraints this is as few touches as I can manage:

MDSing (can be USB or DMG via HTTP) to lay down fresh OS, apply proxy/security client, skip Setup Assistant, create temp user to autologin which prompts a tech to start DEP enrollment (jamfhelper + profiles renew -type enrollment), once the enrollment policies run it restarts for AD users (I know) to login. On first login the AD user is prompted to enable FileVault (script using fdesetup).

Hope it keeps working for 10.15.