Microsoft Intune / Endpoint Security Architect (Windows 11 + macOS)

---

---

What we need — Design and deploy a cloud-first device-control framework for ~15 laptops running Windows 11 and macOS Sonoma — Leverage Microsoft Intune (Endpoint Manager) fully integrated with Azure AD — Enforce robust security policies with zero on-prem infrastructure Must-have capabilities — Remote lock and selective or full wipe for lost or stolen devices — USB and external-drive write control with an encrypted-media whitelist — Upload blocking or throttling to non-approved domains / cloud apps via Microsoft Purview DLP (or equivalent) — Conditional Access that limits SaaS resources to trusted IPs or enrolled, compliant devices — Zero-touch deployment of OS updates, security patches, and line-of-business software to Windows and macOS Deliverables — High-level architecture diagram and phased rollout plan — Fully configured Intune tenant covering enrollment, compliance, configuration, and protection policies — Validated macOS onboarding workflow (Company Portal, ADE, PPPC, system-extension approvals) — Concise runbook and admin quick-start guide — Up to two-hour knowledge-transfer session Ideal expert — Multiple successful Intune rollouts of 100 + seats — Deep experience with Azure AD Conditional Access and Microsoft Purview DLP — Solid grasp of macOS MDM nuances (Apple Business Manager, scripting) — Strong PowerShell and Bash automation skills — Security-first mindset and familiarity with CIS Benchmarks Engagement — Start ASAP — Roughly 20 billable hours across one weeks, milestone-based

Keyword: Design Expert

Price: $85.0

Microsoft Windows macOS Security Management Windows Administration System Administration Microsoft Active Directory Microsoft Azure