Tenders Are Invited For Azure Cloud Infrastructure & Device Management Consultancy

Tenders are invited for Azure Cloud Infrastructure & Device Management Consultancy Location: Kigali Deadline: Tuesday, 30/06/2026 23:59 Objectives The primary objectives of this consultancy are to: Audit and document the current Azure/M365 configuration and identify gaps. Design and implement a secure, scalable Azure environment aligned with best practices. Deploy and configure Microsoft Intune for unified endpoint and device management. Harden security using Microsoft Defender for Cloud and related tools. Establish governance frameworks including Identity & Access Management (IAM) and Conditional Access Policies. Provide training to VIAs internal IT staff and produce comprehensive documentation. Deliver a roadmap for ongoing maintenance and future growth. 2. Scope of Work The consultant shall undertake the following activities across four defined phases. Each phase has specific deliverables and acceptance criteria as outlined in Section 3. 2.1 Phase 1: Discovery, Audit & Design (Weeks 13) Conduct a comprehensive audit of the existing M365 tenant, Azure subscriptions, and Defender for Cloud configuration. Review current user accounts, licences, groups, and roles Assess existing security policies and compliance posture Inventory all enrolled and unmanaged devices Document current network topology and integration points Identify security gaps, misconfigurations, and areas of non-compliance. Develop a detailed Target Architecture Design Document covering: Azure Active Directory (Entra ID) structure and governance model Intune device management architecture Security baseline and Conditional Access framework Network segmentation and identity boundaries Present findings and proposed architecture to VIA leadership for approval. 2.2 Phase 2: Identity, Access & Security Foundation (Weeks 47) Configure and harden Azure Active Directory / Microsoft Entra ID: Implement Multi-Factor Authentication (MFA) for all users Configure Privileged Identity Management (PIM) for admin accounts Set up Self-Service Password Reset (SSPR) Deploy and configure Conditional Access Policies: Risk-based access controls and sign-in policies Device compliance requirements as access gate Named location and trusted IP configurations Optimise Microsoft Defender for Cloud: Enable Defender for Endpoint plans Configure threat protection and alert rules Establish a Security Information baseline and Secure Score targets Implement Azure Policy and role-based access control (RBAC) governance. 2.3 Phase 3: Microsoft Intune & Device Management (Weeks 812) Deploy and configure Microsoft Intune: Enrol Windows and macOS devices as applicable Design and deploy Device Configuration Profiles Establish Device Compliance Policies. Configure Autopilot for zero-touch device provisioning. Configure App Management: Deploy required organisational apps through Intune Company Portal Configure Microsoft 365 Apps deployment and update rings Implement app protection policies for BYOD scenarios Integrate Intune with Defender for Endpoint for unified device compliance signals. Set up Windows Update for Business and patch management rings. Configure remote device management capabilities (wipe, lock, reset). 2.4 Phase 4: Optimisation, Documentation & Handover (Weeks 1316) Conduct end-to-end security review and penetration-readiness assessment. Tune and optimise all deployed configurations based on operational experience. Develop and deliver comprehensive documentation: System Administration Guide Intune Device Enrolment Guide (end-user facing) Incident Response Runbook Azure Architecture Diagram (as-built) Deliver training to VIA IT staff covering day-to-day administration tasks. Produce a 12-month IT Roadmap with prioritised recommendations. Formal knowledge transfer and handover session. Tender Link : https://www.jobinrwanda.com/job/terms-reference-azure-cloud-infrastructure-device-management-consultancy