WDAC Implementation Specialist / Endpoint Security Engineer

XPT Software Australia Pty
Sydney, NSWFull time

Listed 17 Sep 2026

·                     Policy Development & Deployment:

o        Design and implement WDAC policies using XML and convert them to binary for enforcement.

    • Deploy WDAC policies via Microsoft Intune, Endpoint Configuration Manager (ConfigMgr), or PowerShell.
    • Configure audit mode before enforcement to minimize disruption and validate policy effectiveness.
  • Security & Compliance:

o        Enforce application control to prevent unauthorized code execution, including kernel-level protection.

    • Align WDAC implementation with regulatory requirements and organizational security frameworks.
  • Integration & Management:

o        Integrate WDAC with Microsoft Defender Antivirus and other endpoint security tools.

    • Enable managed installer functionality for automated trust of Intune-deployed applications.
  • Monitoring & Troubleshooting:

o        Analyze WDAC logs using Microsoft Security tools (e.g., Advanced Hunting) to refine policies.

    • Resolve application blockage issues and maintain policy updates for evolving business needs.
  • Documentation & Training:

o        Maintain detailed documentation of WDAC configurations and deployment processes.

    • Provide training and support for IT teams and end-users on WDAC policies.

·                     Strong knowledge of Windows security architecture, application control, and endpoint protection.

  • Hands-on experience with Microsoft Intune, ConfigMgr, and PowerShell scripting.
  • Familiarity with Code Integrity policies, audit vs enforcement modes, and policy signing.

·                     Ability to manage large-scale deployments and troubleshoot complex WDAC issues.

 

·                     Preferred Experience:

  • Previous experience implementing WDAC in enterprise environments.
  • Ivanti application control understanding
  • Understanding of Zero Trust security models and compliance frameworks.
  • Knowledge of ASD Essential Eight or similar security hardening guidelines.