资深微软Intune与云安全专员（自由职业）
Senior MS Intune & Cloud Security Specialist (Freelance)
关于Coderio
Coderio为全球公司设计和交付可扩展的数字解决方案。凭借坚实的技术基础和以产品为导向的思维，我们的团队从架构到执行，主导复杂的软件项目。我们重视自主性、清晰的沟通和技术卓越。我们与国际团队和合作伙伴紧密合作，打造具有真实影响力的科技。
🌍 了解更多：coderio.com
我们正在寻找
我们正在寻找一名高级云安全架构师/微软Intune专家，进行自由职业、项目制的工作。理想的候选人将领导微软Intune、Entra ID（纯云端）和微软终端防护（Microsoft Defender for Endpoint）的100%全新实施，该环境将集成Google Workspace、AWS和现代DevOps流水线。
您将负责定义、配置和部署跨Windows、macOS、Android和AWS服务器的设备管理和端点安全策略，确保无缝入职、最大保护，并向内部团队进行知识转移。
职责
- 全新架构与MDM：从零开始设计并实施微软Intune和Entra ID加入，建立对遗留本地Active Directory零依赖的架构。
- 设备注册与管理：配置Windows Autopilot、苹果企业经理（ADE）用于macOS，以及iOS/Android的移动设备管理配置文件。
- 端点安全：设置微软终端防护（MDE）和微软终端漏洞管理（MDVM），配置EDR、防病毒、ASR、网络保护和自动化修复。
- 多云与服务器保护：通过Azure Arc将AWS EC2实例连接至微软终端防护云，并在AWS服务器上启用MDE扩展扫描。
- DevOps安全：将GitHub和GitLab仓库与终端防护云集成，扫描暴露的密钥、IaC配置错误和依赖项漏洞（SCA）。
- 文档与赋能：将配置的策略映射至ISO 27001:2022标准，并为内部工程和安全负责人开展实践技能转移培训。
要求
- 经验：5年以上领导复杂IT基础设施、端点管理或云安全实施的经验。
- 全新实施经验：有实际操作经验，完成过从零开始的微软Intune和Entra ID部署。
- 核心技术栈：对微软Intune、Entra ID、Windows Autopilot、苹果企业经理等有深入的实操能力。
查看英文原文
About Coderio
Coderio designs and delivers scalable digital solutions for global companies. With a strong technical foundation and a product-oriented mindset, our teams lead complex software projects from architecture through execution. We value autonomy, clear communication, and technical excellence. We work closely with international teams and partners, building technology that creates real impact.
🌍 More information: coderio.com
We are looking for
We are looking for a Senior Cloud Security Architect / MS Intune Specialist for a freelance, project-based engagement. The ideal candidate will lead a 100% greenfield implementation of Microsoft Intune, Entra ID (Cloud-only), and Microsoft Defender for Endpoint in an environment that integrates Google Workspace, AWS, and modern DevOps pipelines.
You will be responsible for defining, configuring, and deploying device management and endpoint security policies across Windows, macOS, Android, and AWS servers, ensuring seamless onboarding, maximum protection, and knowledge transfer to internal teams.
Responsibilities
- Greenfield Architecture & MDM: Design and implement Microsoft Intune and Entra ID Join from scratch, establishing zero dependency on legacy on-premises Active Directory.
- Device Enrollment & Management: Configure Windows Autopilot, Apple Business Manager (ADE) for macOS, and mobile device management profiles for iOS/Android.
- Endpoint Security: Set up Microsoft Defender for Endpoint (MDE) and Microsoft Defender Vulnerability Management (MDVM), configuring EDR, Antivirus, ASR, Network Protection, and automated remediation.
- Multi-Cloud & Server Protection: Connect AWS EC2 instances to Microsoft Defender for Cloud via Azure Arc and enable MDE extension scanning on AWS servers.
- DevOps Security: Integrate GitHub and GitLab repositories with Defender for Cloud to scan for exposed secrets, IaC misconfigurations, and dependency vulnerabilities (SCA).
- Documentation & Enablement: Map configured policies against ISO 27001:2022 standards and conduct hands-on skill-transfer sessions for internal engineering and security leads.
Requirements
- Experience: 5+ years of experience leading complex IT infrastructure, endpoint management, or cloud security implementations.
- Proven Greenfield Track Record: Hands-on experience executing zero-base MS Intune and Entra ID deployments.
- Core Technology Stack: Advanced hands-on expertise in Microsoft Intune, Entra ID, Windows Autopilot, Apple Business Manager (ADE), and Defender for Endpoint.
- Multi-Cloud & Servers: Demonstrated experience connecting non-Azure infrastructure (specifically AWS EC2) using Azure Arc.
- DevOps Exposure: Experience connecting GitHub/GitLab repositories for security scanning in cloud environments.
- Availability: Flexible part-time availability aligned with Argentina time zone (ART).
- Communication: Fluent Spanish (spoken and written). Excellent ability to document technical processes and deliver knowledge transfer sessions.
Nice to Have
- Microsoft Certifications: Microsoft Certified Cybersecurity Architect Expert (SC-100), Endpoint Administrator Associate (MD-102), or Azure Security Engineer (AZ-500).
- Compliance Standards: Practical understanding of ISO 27001:2022 framework mapping.
- Scripting: Basic scripting capabilities (PowerShell, Bash).
Benefits
- Flexible freelance / project-based contract (Part-time).
- 100% Remote work.
- High-visibility greenfield architecture ownership.
- Direct collaboration with senior technical leaders and security stakeholders.
Why Join Coderio
At Coderio, we value talent. We are a remote-first company passionate about technology, collaborative work, and professional growth. We offer an inclusive environment with real opportunities to build high-impact cloud security solutions from the ground up.
Originally posted on Himalayas