Microsoft Intune Expert in Munich
for secure endpoint management, matched in minutes with vetted and available freelancersHire experts who manage Windows, macOS, iOS and Android devices, connect Intune with Microsoft Entra ID and automate compliance through Microsoft Graph. FRATCH matches you quickly and precisely with vetted, available freelancers.
Meet FRATCH Experts in Munich, who have recently used Microsoft Intune
Thomas N.
Last position:
Interim Manager at Groupe SEB SA
- Interim project management for the introduction of “o9 Demand Management” software
- Communication: Establishment of continuous stakeholder communication
- Project governance: Planning and meetings for/with key users, including preparation of input from the software development team
- Leadership: Leading and motivating key users
- Risk management: Identifying potential risks and developing mitigation strategies
- Monitoring and control: Tracking project performance, regularly reviewing progress reports and holding status meetings
- Documentation: Maintaining comprehensive project documentation, including training materials
- Conducting key-user information meetings
- Introduction of training meetings
- Introduction of a key-user community
- Software test management and documentation (Squash)
- Introduction of risk management, bug and issue tracking
- Technical acceptance of the software product
Vicenco K.
Last position:
ITSM Project Manager (self-employed)
Unified ITSM framework
- Definition of a company-wide ITSM target picture
- Introduction of a uniform service structure across all business units
SLA and OLA management
- Building a standardized SLA framework
- Definition of service classes (Business Critical, Standard, Low Priority)
- Introduction of OLAs between internal teams
- Building meaningful SLA reporting
- Definition of KPI and service dashboards for business units
Service portfolio management
- Definition of service descriptions
- If needed, preparing possible cost and service billing
Ticketing & processes
- Incident management
- Uniform ticket categories
- Standardized prioritization
- Escalation matrix
- Automations
- Self-service optimization
Request fulfillment
- Service catalog across all business units
- Approval workflows
Problem management
- Introduction of root cause analysis
- Known error database
- Problem review process
Complete asset management concept
- Hardware lifecycle management
- Software lifecycle management
- Leasing lifecycle
- Mobile device lifecycle
- Monitor lifecycle
- Phone lifecycle
Processes
- Procurement
- Goods receipt
- Inventory
- Assignment
- Return
- Disposal
- Leasing return Goal: single source of truth for all assets
CMDB design
- Definition of all configuration items:
- Workplace
- Notebooks
- Monitors
- Mobile phones
- Printers
Infrastructure
- Servers
- Firewalls
- Switches
- WLAN
- Storage
- Backup systems
Cloud
- Azure resources
- Microsoft 365
- SaaS services
Relationships
- User ↔ Asset
- Asset ↔ Service
- Service ↔ Infrastructure
- Location ↔ Asset
- Goal: make all service dependencies visible
Software asset & license management
- License management concept
- License balancing
- Compliance reporting
- Microsoft license management
- Adobe license management
- SaaS management
- Contract management
- Renewal management
Interfaces & automation Existing systems
- Workday
- Joiner
- Mover
- Leaver
TESMA
- Leasing data
- Contract data
Matrix42
- Asset synchronization
- User synchronization
Active Directory / Entra ID
- User management
Microsoft 365
- License assignment
- Group management
Dormakaba
Access processes
Lifecycle services
Monitoring platforms
- PRTG
- Palo Alto
- Cisco
Reporting & KPI framework
- Definition of a management dashboard
- KPIs
- Ticket volume
- SLA fulfillment
- MTTR
- First resolution rate
- Asset accuracy
- License compliance
- Change success rate
- Service availability
- Degree of automation
Network redesign support
- Governance
- Support of the network redesign from an ITSM point of view
- Definition of affected services
- Change management structure
- Communication concept
CMDB integration
- Recording of all network components
- Service mapping
- Dependency analysis
Validation of documentation and knowledge base articles
- Network documentation
- Operations documentation
- Standard changes
Monitoring & event management
- Target picture
- Central monitoring concept
- Event management process
- Alerting strategy
- Escalation model
Systems
Cisco
Palo Alto
Fortinet
Rubrik
Veeam
Matrix42
Azure
Microsoft 365 Automation
Ticket creation from monitoring
Escalations
Standard actions
Audit, compliance & information security
- ISO 27001 consulting
- TISAX consulting
- NIS2 preparation - consulting
- Audit-ready processes
- Documentation structure
- Evidence tracking in Matrix42
Roadmap
- 12-month roadmap
- Prioritization of all measures
- Quick wins
- Medium-term projects
- Long-term target picture
- Documentation
Michael M.
Last position:
Freelance Senior Consultant & Cloud Architect at Rheinmetall AG
- Specialized in designing and implementing robust, secure cloud solutions for critical client infrastructure.
- Expertise in Microsoft Intune environment with a strong focus on system hardening and comprehensive policy management.
- Architected NIST and ISO/IEC 27000 compliant Mobile Device Management (MDM) infrastructure tailored for an international government defense aerospace project.
- Performed an architectural role for an offline Microsoft Endpoint Configuration Manager (MECM) environment, ensuring NIST compliance while handling complex manufacturing infrastructure.
Konstantinos M.
Last position:
IT-Fly Specialist – Global Rollout at Lufthansa Group
Plan & Prepare (Site Design & Readiness): Inventory & Design: Dell PowerEdge R-Series, Aruba Switches (L2/L3), Notebooks/Peripherals; Serial Numbers/Asset Tags, IPv4/IPv6 Addressing, VLAN/DHCP/DNS Plan
Runbooks/MOPs: Site Rollout Runbook, Backout Strategy (<15–30 min), Risk Register, Communication Matrix; Approvals via CAB/Change
Images/Packages: Golden Image (Win10/11), Driver Packs, BIOS/UEFI Baseline; O365/Teams/OneDrive-KFM; BitLocker Policies; MECM/SCCM, Intune/Autopilot, MDT/WinPE
Logistics: Shipping/Customs Clearance, RMA/DOA, On-Site Spares; Tools (Barcode Scanners, Label Printers), "Go-Bag" (Cables, SFPs, Console Cables)
Deliver (On-Site Implementation): Endpoints: Swap & Migration (USMT/OneDrive KFM), Peripherals (ATB/BT Printers, Scanners, Boarding Gate HW); Domain Join, Compliance Checks, O365 Activation, Printers/Queues, Network Drives
Acceptance: Functional Tests for DCS/CUTE/CUPPS/CUSS Stations, Ticketing/Check-in Workflows, Boarding Gates
Servers (R-Series): Rack & Stack, Cabling (PDU Redundancy, Fiber/Copper), Labeling/Nomenclature; Firmware/RAID (PERC), Lifecycle Controller, iDRAC Network; Windows Server 2022/2025 + CIS/BSI Hardening; Agents (Backup/AV/EDR/Monitoring), Time Service/NTP Auth, Syslog/SNMPv3
Network (Aruba): VLANs, LACP Trunks, MSTP Root; Portfast + BPDU-Guard at Edge; QoS (EF/AF); Dual-Stack (v4/v6), DHCP Relay. NAC/802.1X with ClearPass/Radius/TACACS+, Roles + MAB Fallback; Guest Isolation, ACLs (Guest→Mgmt deny). Telemetry: sFlow, SNMPv3, Syslog→SIEM; LLDP→Inventory/CMDB
Airport-Specific: CUTE/CUPPS/CUSS Terminals; DCS/Amadeus/SITA Connectivity; FIDS (read-only); Bag Tag/Boarding Pass Printing; Changes During Off-Peak/Night Windows
Stabilize (Hypercare): First-Day Support, KPI Tracking (Login Times, Ticket Volume, Error Classes), QoS Fine-Tuning
Troubleshooting: Wireshark/iperf, Event Logs, Switch Counters, sFlow Flows; Fast Incident Handling as SPOC
Knowledge Transfer: Short Training Sessions for Station Teams, Mini-Runbooks (Incident/Recovery)
Close (Documentation & Handover): Documentation & CMDB: Final Configs (Switch/Server), Topology/Patch Plans, IP Tables, Serial Number/Asset Lists, Before/After Photos
Acceptance & Sign-off: UAT Protocols, Functional Evidence (Use Cases), Return/Reuse of Old Hardware
Lessons Learned: Risks, Standard Packages, Driver Freeze, "Known Issues"
Interfaces/Communication: Station IT, Airport IT, SOC/NOC, Ground Ops/Ramp/Check-in, Providers (SITA/Amadeus). ITSM: ServiceNow (Inc/Req/Change/KB), Handover to BAU
Philipp S.
Last position:
MS365 Consultant/Solution Architect at Self-employed
- Setup and configuration of an M365 tenant on a hybrid basis
- SSO integration of the existing app infrastructure like Metamost, Huhu, etc.
- License consulting, Entra ID initial configuration, MFA, Conditional Access, Privileged Identity Management
- Intune: initial configuration, Windows 11 Autopilot, iPhone AES
- Takeover of the tenant and preparation of a security audit
- Rollout of iPhones with AES (formerly DEP) as COPE (Corporate Owned, Business Enabled)
- Connecting external customers with enhanced security through Conditional Access
- Consulting on cloud-first strategy and migration to a cloud-only business
- Connecting various apps via SSO/SCIM (e.g. Atlassian, Personio, Adobe)
- On-premises AD: security audit and project management for replacing the local AD (migration of file servers, Navision2016, user clients joined to Entra ID)
- Copilot rollout with connection to external data sources and configuration via Intune
- Support for TISAX and ISO27001 preparation
- Setup and hardening of Entra ID, switching MFA to phishing resistant via Conditional Access
- Intune management for Windows and Apple clients, web enrollment switch to AES, introduction of Autopilot, app management, integration of Microsoft Defender
- Building a device baseline for Windows (COBO) and iOS/Android (BYOD)
- Teams/SharePoint Online: access concepts and integration into Teams
- Maintenance and backup of Entra ID and Intune tenants (drift management)
- M365 backup with Veeam
- Extending Conditional Access policies, introduction of Privileged Identity Management with hardware tokens and an on-premises admin tier concept
- Revision of existing GPOs regarding structure, security, and compliance
- Security audit and hardening of on-premises Active Directory and cloud tenant, SAML VPN, PIM introduction
- Support for the HR department in introducing a booking portal and general system engineering administration & security
- Introduction of Conditional Access and passwordless MFA, platform SSO, Defender for macOS/iOS, macOS compliance with Intune, Code2 signature configuration
Dmytro G.
Last position:
Retraining (IT specialist for system integration) at Comcave
Discover over 15,000 top freelancers
Statistics of experts using Microsoft Intune
Aggregated from the professional profiles of matched freelancers.
Experience
28 years (Germany: 21 years)
Position duration
1.2 years (Germany: 2.9 years)
Positions per freelancer
17 (Germany: 15)
Top business areas
Information Technology, Operations, Project Management
Top industries
Information Technology, Manufacturing, Banking and Finance
Certification focus areas
Information Technology, Project Management, Business Intelligence
Bachelor's degree or higher
33% (Germany: 63%)
Master's degree or higher
33%
Certifications per freelancer
6
Most common languages
English, German, French
Speak two or more languages
100% (Germany: 95%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Munich are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Munich using Microsoft Intune
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Microsoft Intune experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Manufacturing (100%)
- Banking and Finance (83%)
- Automotive (67%)
- Energy (67%)
- Professional Services (67%)
- Aerospace and Defense (50%)
- Education (50%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What Intune does
Microsoft Intune is a cloud service for managing devices, applications and access across an organization. It supports endpoint configuration, mobile device management, mobile application management and security policy enforcement without relying on traditional on-premises tools. Companies use Intune to control corporate devices and protect business data on personal devices.
Core capabilities
Intune professionals design and operate policies for Windows, macOS, iOS, Android and specialized endpoints. They handle enrollment, configuration profiles, compliance rules, application deployment, update management and conditional access with Microsoft Entra ID. They also connect device signals with Microsoft Defender and other Microsoft security services.
- Define enrollment and compliance policies
- Package and deploy business applications
- Configure Autopilot and device provisioning
- Protect data with app protection policies
Ecosystem and tooling
Strong work with Intune requires more than knowledge of its admin center. The surrounding toolkit includes Microsoft Entra ID, Windows Autopilot, Microsoft Defender for Endpoint, Configuration Manager and Microsoft Graph. Specialists may use PowerShell, Graph API, JSON policy definitions and remediation scripts to standardize administration and integrate Intune with identity, security and service management workflows.
When companies need help
Companies bring in freelance Intune expertise during cloud migrations, hybrid endpoint transitions, tenant consolidations and security improvements. Support is also valuable when enrollment is inconsistent, policies conflict, application delivery fails or administrators need a reliable operating model. In Munich, specialists can work remotely or coordinate on-site with IT, security and workplace teams, depending on the rollout and language requirements.
- Replace or extend Configuration Manager
- Prepare a Windows Autopilot rollout
- Establish endpoint compliance and reporting
- Resolve enrollment and policy conflicts
Project deliverables
Typical deliverables include an endpoint strategy, tenant configuration, policy catalog, application packages, enrollment documentation and migration plans. Professionals may build dashboards, automate repetitive actions, create support runbooks and define ownership for ongoing operations. A careful rollout uses pilot groups, staged deployment and clear rollback procedures rather than changing every device at once.
What strong specialists bring
The best Intune specialists combine endpoint administration with identity, security and automation skills. They understand how a policy affects users, devices, applications and access decisions across the Microsoft ecosystem. Look for clear documentation, tested changes, practical troubleshooting and the ability to explain technical trade-offs to workplace, security and business stakeholders.
Frequently asked questions
Questions about Microsoft Intune? Start with the answers below.
Microsoft Intune is used to manage devices, applications and access policies from the cloud. Companies use it for enrollment, configuration, compliance, application deployment and protection of business data across Windows, macOS, iOS and Android.
Microsoft Intune is primarily cloud-based, while Configuration Manager is traditionally used for on-premises management and detailed control of corporate infrastructure. Many organizations use both during a gradual transition, with the right choice depending on device types, network conditions, application needs and migration plans.
A strong Intune specialist usually understands Microsoft Entra ID, conditional access, Windows Autopilot, Microsoft Defender and endpoint security. PowerShell, Microsoft Graph, application packaging and Configuration Manager experience are also useful for automation and hybrid environments.
The required experience depends on the scope. A policy review may need focused Intune expertise, while a tenant migration or enterprise rollout calls for someone who has handled identity dependencies, application packaging, pilot groups, user communication and operational handover.
Microsoft Intune is well suited to remote collaboration because administration is cloud-based and changes can be documented and reviewed online. On-site work in Munich can still help with hardware preparation, local support processes, workshops or coordination with workplace and security teams.
Ask which device types, identity services and deployment tools the specialist has managed. Request examples of policy design, application deployment, Autopilot, troubleshooting and documentation, and clarify how changes will be tested before wider release.
Microsoft Intune can replace or complement traditional tools, but it is not automatically a complete substitute in every environment. Legacy applications, specialized devices, software distribution needs and existing Configuration Manager processes may require co-management or a staged migration.
A capable Microsoft Intune freelancer explains the reasoning behind policies and demonstrates disciplined testing. Quality is visible in clear naming, least-privilege access, predictable deployments, useful reporting, reliable rollback plans and documentation that another specialist can maintain.
The average hourly rate of freelancers in Munich, Germany who have used Microsoft Intune in their recent projects is 95 €, which corresponds to a daily rate of about 759 € based on an 8-hour working day.
Of the freelancers in Munich, Germany who have used Microsoft Intune in their recent projects, 33% hold at least a Bachelor's degree and 33% hold at least a Master's degree.
On average, freelancers in Munich, Germany who have used Microsoft Intune in their recent projects have 28 years of professional experience, with a single engagement typically lasting around 1.2 years.
The most common languages among freelancers in Munich, Germany who have used Microsoft Intune in their recent projects are English (100%), German (83%), and French (67%).
The most common industries among freelancers in Munich, Germany who have used Microsoft Intune in their recent projects are Information Technology (100%), Manufacturing (100%), and Banking and Finance (83%).
The most common business areas among freelancers in Munich, Germany who have used Microsoft Intune in their recent projects are Information Technology (100%), Operations (100%), and Project Management (100%).
Main locations of FRATCH Experts, who have recently used Microsoft Intune
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Frankfurt Countries:
Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
