WDAC Implementation Specialist

Key Responsibilities:

• Design, develop, and implement Windows Defender Application Control (WDAC) policies, including XML policy creation, configuration, testing, and binary conversion for deployment.
• Deploy and manage WDAC policies across enterprise environments using Microsoft Intune, Endpoint Configuration Manager (ConfigMgr/SCCM), Group Policy, and PowerShell.
• Execute audit-mode assessments, analyse application execution events, and transition validated policies into enforcement mode while minimising business disruption.
• Investigate and resolve application control issues, including blocked applications, policy conflicts, software compatibility concerns, and exception management.
• Integrate WDAC with Microsoft Defender for Endpoint, Microsoft Defender Antivirus, and broader endpoint security solutions to strengthen application control and endpoint protection.
• Monitor and analyse WDAC, Code Integrity, and endpoint security logs using Advanced Hunting, KQL, Event Viewer, and Microsoft security tooling to continuously improve policy effectiveness.
• Implement and maintain application whitelisting controls aligned with organisational security frameworks, Zero Trust principles, and compliance requirements.
• Collaborate with infrastructure, desktop, security, and application teams to support WDAC rollout activities, policy tuning, and ongoing operational support.
• Create and maintain technical documentation, operational procedures, implementation guides, and support runbooks.
• Provide knowledge transfer, training, and ongoing support to technical teams and business stakeholders throughout the WDAC implementation lifecycle.