Job Description
n
Design, develop, and implement Windows Defender Application Control (WDAC) policies, including XML policy creation, configuration, testing, and binary conversion for deployment.
n
Deploy and manage WDAC policies across enterprise environments using Microsoft Intune, Endpoint Configuration Manager (ConfigMgr/SCCM), Group Policy, and PowerShell.
n
Execute audit-mode assessments, analyse application execution events, and transition validated policies into enforcement mode while minimising business disruption.
n
Investigate and resolve application control issues, including blocked applications, policy conflicts, software compatibility concerns, and exception management.
n
Integrate WDAC with Microsoft Defender for Endpoint, Microsoft Defender Antivirus, and broader endpoint security solutions to strengthen application control and endpoint protection.
n
Monitor and analyse WDAC, Code Integrity, and endpoint security logs using Advanced Hunting, KQL, Event Viewer, and Microsoft security tooling to continuously improve policy effectiveness.
n
Implement and maintain application whitelisting controls aligned with organisational security frameworks, Zero Trust principles, and compliance requirements.
n
Collaborate with infrastructure, desktop, security, and application teams to support WDAC rollout activities, policy tuning, and ongoing operational support.
n
Create and maintain technical documentation, operational procedures, implementation guides, and support runbooks.
n
Provide knowledge transfer, training, and ongoing support to technical teams and business stakeholders throughout the WDAC implementation lifecycle.
n
n
Key Responsibilities:
n
n
Design, develop, and implement Windows Defender Application Control (WDAC) policies, including XML policy creation, configuration, testing, and binary conversion for deployment.
n
Deploy and manage WDAC policies across enterprise environments using Microsoft Intune, Endpoint Configuration Manager (ConfigMgr/SCCM),



Group Policy, and PowerShell.
n
Execute audit-mode assessments, analyse application execution events, and transition validated policies into enforcement mode while minimising business disruption.
n
Investigate and resolve application control issues, including blocked applications, policy conflicts, software compatibility concerns, and exception management.
n
Integrate WDAC with Microsoft Defender for Endpoint, Microsoft Defender Antivirus, and broader endpoint security solutions to strengthen application control and endpoint protection.
n
Monitor and analyse WDAC, Code Integrity, and endpoint security logs using Advanced Hunting, KQL, Event Viewer, and Microsoft security tooling to continuously improve policy effectiveness.
n
Implement and maintain application whitelisting controls aligned with organisational security frameworks, Zero Trust principles, and compliance requirements.
n
Collaborate with infrastructure, desktop, security, and application teams to support WDAC rollout activities, policy tuning, and ongoing operational support.
n
Create and maintain technical documentation, operational procedures, implementation guides, and support runbooks.
n
Provide knowledge transfer, training, and ongoing support to technical teams and business stakeholders throughout the WDAC implementation lifecycle.
n
n
A successful WDAC Implementation Specialist should have:
n
n
Proven experience implementing and supporting Windows Defender Application Control (WDAC) within large enterprise environments.
n
Strong understanding of Windows security architecture, application control,



code integrity policies, application whitelisting, and endpoint security technologies.
n
Hands-on experience with WDAC policy authoring, XML policy management, audit versus enforcement mode, policy signing, supplemental policies, and managed installer configuration.
n
Strong experience administering and deploying solutions through Microsoft Intune, Endpoint Configuration Manager (ConfigMgr/SCCM), and PowerShell automation.
n
Experience troubleshooting application execution blocks, compatibility issues, policy exceptions, and endpoint security controls in production environments.
n
Knowledge of Microsoft Defender for Endpoint, Defender Antivirus, Advanced Hunting, KQL, and security event analysis.
n
Experience delivering security solutions within regulated or large-scale enterprise environments.
n
Understanding of Zero Trust security principles, ASD Essential Eight, ISM, and other relevant cybersecurity compliance frameworks.
n
Excellent documentation, communication, and stakeholder engagement skills, with the ability to work across technical and business teams.
n
Exposure to AppLocker, Ivanti Application Control, McAfee Application Control, or other application whitelisting technologies will be highly regarded.
n
n
A global technology services and consulting organisation with a significant international presence, delivering digital transformation, cloud, engineering, and business process solutions across a wide range of industries. The company is recognised for helping enterprises modernise operations, improve efficiency, and adopt emerging technologies at scale.
n
n
Hybrid environment with 50% work from home
n
Long-term contracting prospect
n
Ability to work in a fast-paced digital transformation team
n
n
If this WDAC Implementation Specialist role in Sydney aligns with your skills and experience in the Technology industry, we encourage you to apply.

📌 Wdac Implementation Specialist (New South Wales)
🏢 Michael Page
📍 New South Wales