A software development company is looking for a senior professional to implement the MDM (Intune) project in the mixed MacOS/Windows remote working environment.

The company creating the world’s most used route sequencing and optimization software for small businesses and enterprises. With over 35,000 customers, the company helps last mile businesses save tremendous amounts of money, time, and labor. Moreover, provides seamless continuity through the entire route planning, route dispatch, route navigation, and tracking process. 

The company offers exposure to a variety of industries and technologies, room to grow as a professional, time in projects to learn new skills and an opportunity to work with phenomenal coworkers, some of the best people on the planet.

As a result we want to achieve fully documented, secured and manageable Intune tenant of the following configuration:

● ~ 50 remote users;

● ~ 20 packaged applications and browser extensions for MacOS/Windows;

● Cleanup from banned applications (games, social communication tools);

● MS Defender recommended security policies applied to all workstations, including:

- Encryption of the harddrive, firewall, restricted ability of the user to install software, blocked certain type of software from execution (unapprove browsers, social communication tools).

● Workstation and Intune Cloud services performance monitoring, security and operational alerts dashboards (or at least LogAnalytics properly configured logging and set of queries).

The documentation should be sufficient enough to recreate the whole Intune tenant, security and monitoring settings and application packages from scratch (without access to the original tenant). It should include at least:

● Inventory of user and licenses;

● Inventory of devices and user assignments;

● Inventory of groups;

● Inventory of security policies and configuration profiles;

● Details on application packages:

- Intune settings, detection rules, install/uninstall options;

- Packaging sources (original installation files, scripts, instructions to assemble the final package from scripts and installation).

●Details on cleanup approach (custom scripts, custom detection rules for unapproved applications, Windows/MacOS App-Locker/Defender blocking rules, Defender for Cloud blocking rules).

Requirements:

The candidate should have a proof records of successful projects in the following areas:

● Application packaging for Windows/MacOS for Intune;

● Applying security policies for Intune managed workstations;

● Microsoft Intune certification (Microsoft 365 Certified: Enterprise Administrator Expert, Microsoft Azure Administrator);

● Fluent English;

● Teamwork and problem solving mind.

Nice to have:

• Terraform and GCP services.

  
  

We also expect you to provide regular consultancy to our team in the following areas:

• Google Workspace administration;
• Azure Virtual machines, networking, storage accounts, Azure Virtual Desktop, AzureAD;
• A big plus if you know Terraform and GCP services.

  
  

Benefits: 

• Flexible working hours; 
• Remote work; 
• Project work than opportunity to sign a Part time/support contract.