WDAC Implementation Specialist / Endpoint Security Engineer

· Policy Development & Deployment: o Design and implement WDAC policies using XML and convert them to binary for enforcement. Deploy WDAC policies via Microsoft Intune, Endpoint Configuration Manager (ConfigMgr), or PowerShell. Configure audit mode before enforcement to minimize disruption and validate policy effectiveness.

Security & Compliance: o Enforce application control to prevent unauthorized code execution, including kernel-level protection. Align WDAC implementation with regulatory requirements and organizational security frameworks. Integration & Management: o Integrate WDAC with Microsoft Defender Antivirus and other endpoint security tools.

Enable managed installer functionality for automated trust of Intune-deployed applications. Monitoring & Troubleshooting: o Analyze WDAC logs using Microsoft Security tools (e.g., Advanced Hunting) to refine policies. Resolve application blockage issues and maintain policy updates for evolving business needs. Documentation & Training: o Maintain detailed documentation of WDAC configurations and deployment processes.

Provide training and support for IT teams and end-users on WDAC policies.

• Strong knowledge of Windows security architecture, application control, and endpoint protection. Hands-on experience with Microsoft Intune, ConfigMgr, and PowerShell scripting. Familiarity with Code Integrity policies, audit vs enforcement modes, and policy signing.
• Ability to manage large-scale deployments and troubleshoot complex WDAC issues.
• Preferred Experience: Previous experience implementing WDAC in enterprise environments. Ivanti application control understanding Understanding of Zero Trust security models and compliance frameworks. Knowledge of ASD Essential Eight or similar security hardening guidelines.