Senior MS Intune & Cloud Security Specialist (Freelance)

Coderio designs and delivers scalable digital solutions for global companies. With a strong technical foundation and a product-oriented mindset, our teams lead complex software projects from architecture through execution. We value autonomy, clear communication, and technical excellence. We work closely with international teams and partners, building technology that creates real impact.

🌍 More information: coderio.com

We are looking for a Senior Cloud Security Architect / MS Intune Specialist for a freelance, project-based engagement. The ideal candidate will lead a 100% greenfield implementation of Microsoft Intune, Entra ID (Cloud-only), and Microsoft Defender for Endpoint in an environment that integrates Google Workspace, AWS, and modern DevOps pipelines.

You will be responsible for defining, configuring, and deploying device management and endpoint security policies across Windows, macOS, Android, and AWS servers, ensuring seamless onboarding, maximum protection, and knowledge transfer to internal teams.

• →

  Greenfield Architecture & MDM: Design and implement Microsoft Intune and Entra ID Join from scratch, establishing zero dependency on legacy on-premises Active Directory.

• →

  Device Enrollment & Management: Configure Windows Autopilot, Apple Business Manager (ADE) for macOS, and mobile device management profiles for iOS/Android.

• →

  Endpoint Security: Set up Microsoft Defender for Endpoint (MDE) and Microsoft Defender Vulnerability Management (MDVM), configuring EDR, Antivirus, ASR, Network Protection, and automated remediation.

• →

  Multi-Cloud & Server Protection: Connect AWS EC2 instances to Microsoft Defender for Cloud via Azure Arc and enable MDE extension scanning on AWS servers.

• →

  DevOps Security: Integrate GitHub and GitLab repositories with Defender for Cloud to scan for exposed secrets, IaC misconfigurations, and dependency vulnerabilities (SCA).

• →

  Documentation & Enablement: Map configured policies against ISO 27001:2022 standards and conduct hands-on skill-transfer sessions for internal engineering and security leads.

• Experience: 5+ years of experience leading complex IT infrastructure, endpoint management, or cloud security implementations.

• Proven Greenfield Track Record: Hands-on experience executing zero-base MS Intune and Entra ID deployments.

• Core Technology Stack: Advanced hands-on expertise in Microsoft Intune, Entra ID, Windows Autopilot, Apple Business Manager (ADE), and Defender for Endpoint.

• Multi-Cloud & Servers: Demonstrated experience connecting non-Azure infrastructure (specifically AWS EC2) using Azure Arc.

• DevOps Exposure: Experience connecting GitHub/GitLab repositories for security scanning in cloud environments.

• Availability: Flexible part-time availability aligned with Argentina time zone (ART).

• Communication: Fluent Spanish (spoken and written). Excellent ability to document technical processes and deliver knowledge transfer sessions.

• Microsoft Certifications: Microsoft Certified Cybersecurity Architect Expert (SC-100), Endpoint Administrator Associate (MD-102), or Azure Security Engineer (AZ-500).

• Compliance Standards: Practical understanding of ISO 27001:2022 framework mapping.

• Scripting: Basic scripting capabilities (PowerShell, Bash).