Alternative plan and feasibility study for FOSS Intune?

I have a task to research an alternative plan to Microsoft Intune, and we are particularly interested in open source solutions.

We currently have the free version of Intune, but can you guide me on whether it would be possible to move completely away from Intune and use an open-source alternative, or if it would be better to keep the free version of Intune and combine it with an open-source solution to cover the remaining features?

Ideally, we want the open source solution to at least be able to:

• Create compliance policies
• Configure Windows Update rings
• Deploy security baselines
• Configure BitLocker or an alternative to BitLocker
• Configure Microsoft Defender/AV policies
• Create configuration profiles
• Deploy applications

Has anyone implemented something similar?

Any experience or advice would be appreciated!