· Policy Development &
Deployment:

o Design and implement
WDAC policies using XML and convert them to binary for enforcement.

- Deploy WDAC policies via Microsoft Intune, Endpoint
Configuration Manager (ConfigMgr), or PowerShell.

- Configure audit mode before enforcement to minimize
disruption and validate policy effectiveness.

- Security & Compliance:


o Enforce application control
to prevent unauthorized code execution, including kernel -level protection.

- Align WDAC implementation with regulatory
requirements and organizational security frameworks.

- Integration & Management:


o Integrate WDAC with
Microsoft Defender Antivirus and other endpoint security tools.

- Enable managed installer functionality for automated
trust of Intune -deployed applications.

- Monitoring & Troubleshooting:


o Analyze WDAC logs using
Microsoft Security tools (e.g., Advanced Hunting) to refine policies.

- Resolve application blockage issues and maintain
policy updates for evolving business needs.





- Documentation & Training:


o Maintain detailed
documentation of WDAC configurations and deployment processes.

- Provide training and support for IT teams and
end -users on WDAC policies.


· Solid knowledge of
Windows security architecture, application control, and endpoint protection.

- Hands -on experience with Microsoft Intune, ConfigMgr,
and PowerShell scripting.

- Familiarity with Code Integrity policies, audit vs
enforcement modes, and policy signing.


· Ability to manage
large -scale deployments and troubleshoot complex WDAC issues.

· Preferred Experience:

- Previous experience implementing WDAC in enterprise
environments.

- Ivanti application control understanding

- Understanding of Zero Trust security models and
compliance frameworks.

- Knowledge of ASD Essential Eight or similar security
hardening guidelines.