Well you've come to the right place, Jamf is the best.
Check out this article to get started - https://www.jamf.com/resources/e-books/zero-touch-apple-device-deployments-for-beginners/
Might want to contact your Jamf Buddy for some advice as well, They're great people & very helpful.
Because of adamantium infrastructure constraints this is as few touches as I can manage:
MDSing (can be USB or DMG via HTTP) to lay down fresh OS, apply proxy/security client, skip Setup Assistant, create temp user to autologin which prompts a tech to start DEP enrollment (jamfhelper + profiles renew -type enrollment), once the enrollment policies run it restarts for AD users (I know) to login. On first login the AD user is prompted to enable FileVault (script using fdesetup).
Hope it keeps working for 10.15.