Azure AD & Intune Expert

• Role: Azure AD & Intune Expert (Project-Based Engagement)
• Mode: Onsite
• Duration: 12 months, renewable
• Location: Kuala Lumpur, Malaysia

Scope of Work1. Azure AD Review, Security Hardening & Reorganization

• Audit and clean up existing Azure AD tenant:
• Users, devices, guest accounts, stale entries
• Over-assigned or outdated roles and access
• Standardize and restructure security groups, naming conventions, and admin roles
• Review and refine Conditional Access, MFA enforcement, legacy authentication, and external access policies
• Propose and implement a role-based access model, using Privileged Identity Management (PIM) where needed
• Apply Microsoft-recommended Zero Trust security principles

2. Microsoft Intune Policy Standardization

• Evaluate current Intune configuration and global policy usage
• Design and implement a consistent baseline across all regions for:
• Compliance & configuration policies
• App deployment (Bitdefender, PDQ, Cato Client, A400, Chrome, etc.)
• Device grouping and tagging
• Provide policy separation where necessary based on office or region

3. Windows Autopilot Deployment

• Plan and set up Windows Autopilot for zero-touch laptop provisioning
• Define deployment profiles by office/region and link them to Intune policies
• Coordinate with hardware vendors to enroll devices into Autopilot
• Support a phased rollout and create internal Autopilot SOPs and documentation

4. Documentation & Rollout Planning

• Document all recommendations and approved changes
• Provide a phased rollout plan for implementation by office/region
• Deliver internal training or handover sessions to the Global IT Support team

5. License Assignment Optimization

• Review current license assignment practices
• Recommend and implement a more efficient or automated license allocation method
• Align license distribution with user roles, office regions, and operational needs
• Ensure the setup is scalable and easy to maintain
• Provide documentation and internal guidance

Engagement Details

• Engagement Type: Project-Based
• Estimated Duration: To be proposed based on your scope assessment
• Location: Remote (global understanding preferred)
• Reporting Line: CIO and CISO, with support from the Global IT

Job Type: Contractual / Temporary
Contract length: 12 months

Pay: ₹2,000,000.00 - ₹3,500,000.00 per year

Benefits:

• Health insurance

Application Question(s):

• How many years of experience in Azure AD?
• How many years of experience in Microsoft Intune?
• Are you willing to relocate Malaysia for this opportunity?
• What is your Current Salary?
• What is your Expected Salary?
• What is notice period?