Microsoft Intune & Entra ID Consultant | Endpoint Management, Autopilot, Conditional Access, PowerShell/Graph | 100% remote,...

Independent Microsoft Intune and Entra ID consultant: tenant assessments, Conditional Access, Autopilot, security baselines, PowerShell/Graph automation. 100% remote from Romania (EU). Working language: English - I don't speak German.

• Active Directory2 J.
• Conditional Access
• Microsoft Azure4 J.
• Microsoft Entra ID
• Microsoft Graph API
• Microsoft Intune
• Microsoft Office 365
• System Center Configuration Manager2 J.
• Windows Autopilot
• Windows Powershell7 J.

Independent consultant (own registered business since February 2025, previously Microsoft, Stefanini and Capgemini) for Microsoft endpoint management, identity and Azure automation. I take on remote engagements for enterprise clients and own the endpoint and automation side: assessment, target design, security baselines and the automation platform underneath. Estates so far: a few hundred to a few thousand devices, Windows, macOS and Linux.

Selected projects:
- Full assessment of a 2,200-device estate: read-only audit toolkit across 29 Intune object families, 482 findings, ranked remediation plan for management.
- Conditional Access rebuilt for a 1,300-user tenant: 17 policies written as code with build, verify and repair tooling, verified against the live tenant, enforced in staged waves.
- Tenant configuration in Git with weekly drift detection: manual changes are reported with who, when and what.
- Certificate service on Azure Functions replacing shared client secrets.
- Cloud-native Azure Virtual Desktop, fully automated with PowerShell, Bicep and Azure Automation.
- CIS Level 1 (Windows 11) as a working pipeline: controls mapped to Intune Settings Catalog and checked against the live tenant.
- Application packaging at scale: PSADT-based framework, 150+ packages in production.
- Earlier: Azure AD and Intune SME during Capgemini's move of about 400,000 devices to Azure AD, Intune and Autopilot; SCCM for 30,000 devices at Altran.

How I work:
- Rate: EUR 80/h, remote.
- Availability: immediately. Part-time (20-25 h/week) or full-time by arrangement, for projects of 3 to 6 months.
- Location: 100% remote from Romania (EU). Short visits only at kickoff and handover.
- Working language: English. I don't speak German, so the team would need to work with me in English.
- Invoicing through my own registered business (PFA, Romania).

Endpoint management: Microsoft Intune, Windows Autopilot, Configuration Manager (SCCM/MECM), Windows Update for Business, WSUS, Endpoint Analytics, PSADT application packaging, macOS and iOS management, Apple Business Manager / ADE.
Identity and security: Microsoft Entra ID, Conditional Access, PIM, RBAC, MFA and passwordless (Windows Hello for Business), PKI and certificate-based authentication, CIS Benchmarks, Microsoft Defender, LAPS, BitLocker, Microsoft Purview, Azure Information Protection, Active Directory.
Azure and infrastructure as code: Bicep and ARM, Azure Automation (runbooks, managed identity), Azure Functions, Azure Virtual Desktop, Azure VM Image Builder and Compute Gallery, hub-and-spoke networking, Azure Storage, Log Analytics and KQL.
Automation: PowerShell (expert, 5.1 and 7), Microsoft Graph API, Python, Bash, Git and GitHub, CI/CD pipelines, configuration as code.
Certifications: Microsoft 365 Certified: Administrator Expert; Microsoft 365 Certified: Endpoint Administrator Associate; CompTIA Security+.