Lead Windows Endpoint Security Engineer

Location:
Sydney | Hybrid, 3 days per week in the office Employment Type: Contract Security Clearance: Baseline or above, or ability to obtain clearance
- Lead Windows endpoint security engineering across a complex enterprise environment.
- Hands-on Microsoft Intune, SCCM/MECM, Defender for Endpoint and Windows hardening.
- Drive Essential Eight security uplift while mentoring and guiding technical teams. About the opportunity We're looking for an experienced Lead Windows Endpoint Security Engineer to take technical ownership of Windows endpoint security within a large, complex organisation. This is a hands-on engineering role with significant technical leadership responsibilities. You'll be responsible for designing, implementing and improving endpoint security controls, while helping strengthen the organisation's cyber security posture. The focus is on Windows endpoint hardening, Microsoft security technologies, Essential Eight compliance and enterprise security uplift . You'll work closely with Infrastructure, Endpoint Engineering and Cyber Security teams, providing technical direction and mentoring engineers across the organisation. What you'll be doing
- Lead the design, implementation and improvement of secure Windows endpoint environments.
- Engineer and optimise endpoint management solutions using Microsoft Intune, MECM/SCCM and Windows Autopilot .
- Implement security hardening, application control, patch management and vulnerability remediation.
- Drive endpoint security uplift aligned with ASD Essential Eight and the Information Security Manual (ISM) .
- Configure and improve Microsoft Defender for Endpoint, Entra ID, Active Directory and Group Policy security controls.
- Develop secure configuration baselines, endpoint security standards and technical documentation.
- Improve endpoint monitoring, logging and integration with security operations platforms.
- Provide technical leadership,



mentoring and guidance to Endpoint, Infrastructure and Cyber Security Engineers. What we're looking for
- Robust hands-on experience engineering and securing enterprise Windows endpoint environments .
- Advanced knowledge of Microsoft Intune, MECM/SCCM, Windows Autopilot and Group Policy .
- Experience with Microsoft Defender for Endpoint, Entra ID and Active Directory .
- Proven experience implementing Windows security hardening, application control and secure configuration baselines.
- Strong understanding of ASD Essential Eight , particularly application control, patching and endpoint security requirements.
- Experience delivering large-scale endpoint security improvements or transformation projects.
- Ability to troubleshoot complex technical issues and make security architecture decisions.
- Excellent communication skills, with experience mentoring engineers and influencing technical stakeholders. Why consider this opportunity? This is an opportunity to take ownership of a significant Windows endpoint security uplift, with the autonomy to influence technical standards and engineering decisions. You'll combine deep technical engineering with leadership, helping build stronger security capabilities across multiple teams. Please note: Applicants must hold a Baseline security clearance or above, or be eligible to obtain an Australian Government security clearance. If you're a senior Windows Endpoint Engineer with strong security expertise and experience delivering Essential Eight improvements, we'd love to hear from you. For a confidential discussion, contact Hayley at [email protected] . For the latest jobs, tech news or to introduce a friend for a $1,000 referral fee , follow us on LinkedIn: https://www.linkedin.com/company/thedrivegroup TheDriveGroup is 100% committed to improving meaningful diversity in the technology industry. We partner with clients who embrace diversity and seek candidates across all backgrounds, abilities, genders, sexualities, cultures and faiths.

📌 Lead Windows Endpoint Security Engineer (Southern Sydney)
🏢 TheDriveGroup
📍 Southern Sydney