WDAC Implementation

Role Description

·                     Policy Development & Deployment:

o        Design and implement WDAC policies using XML and convert them to binary for enforcement.

• Deploy WDAC policies via Microsoft Intune, Endpoint Configuration Manager (ConfigMgr), or PowerShell.
  
• Configure audit mode before enforcement to minimize disruption and validate policy effectiveness.
  
• Security & Compliance:
  

o        Enforce application control to prevent unauthorized code execution, including kernel-level protection.

• Align WDAC implementation with regulatory requirements and organizational security frameworks.
  
• Integration & Management:
  

o        Integrate WDAC with Microsoft Defender Antivirus and other endpoint security tools.

• Enable managed installer functionality for automated trust of Intune-deployed applications.
  
• Monitoring & Troubleshooting:
  

o        Analyze WDAC logs using Microsoft Security tools (e.g., Advanced Hunting) to refine policies.

• Resolve application blockage issues and maintain policy updates for evolving business needs.
  
• Documentation & Training:
  

o        Maintain detailed documentation of WDAC configurations and deployment processes.

• Provide training and support for IT teams and end-users on WDAC policies.
  

Essential Skill

·                     Strong knowledge of Windows security architecture, application control, and endpoint protection.

• Hands-on experience with Microsoft Intune, ConfigMgr, and PowerShell scripting.
  
• Familiarity with Code Integrity policies, audit vs enforcement modes, and policy signing.
  

·                     Ability to manage large-scale deployments and troubleshoot complex WDAC issues.

·                     Preferred Experience:

• Previous experience implementing WDAC in enterprise environments.
  
• Ivanti application control understanding
  
• Understanding of Zero Trust security models and compliance frameworks.
  
• Knowledge of ASD Essential Eight or similar security hardening guidelines.