WDAC Implementation

Role Description

·                     Policy Development & Deployment:

o        Design
and implement WDAC policies using XML and convert them to binary for
enforcement.

• Deploy WDAC policies via
  Microsoft Intune, Endpoint Configuration Manager (ConfigMgr), or
  PowerShell.
  
• Configure audit mode before
  enforcement to minimize disruption and validate policy effectiveness.
  
• Security & Compliance:
  

o        Enforce
application control to prevent unauthorized code execution, including
kernel -level protection.

• Align WDAC implementation
  with regulatory requirements and organizational security frameworks.
  
• Integration & Management:
  

o        Integrate
WDAC with Microsoft Defender Antivirus and other endpoint security tools.

• Enable managed installer
  functionality for automated trust of Intune -deployed applications.
  
• Monitoring &
  Troubleshooting:
  

o        Analyze
WDAC logs using Microsoft Security tools (e.g., Advanced Hunting) to refine
policies.

• Resolve application blockage
  issues and maintain policy updates for evolving business needs.
  
• Documentation & Training:
  

o        Maintain
detailed documentation of WDAC configurations and deployment processes.

• Provide training and support
  for IT teams and end -users on WDAC policies.
  

Essential Skill

·                     Strong knowledge of Windows security architecture, application
control, and endpoint protection.

• Hands -on experience with
  Microsoft Intune, ConfigMgr, and PowerShell scripting.
  
• Familiarity with Code
  Integrity policies, audit vs enforcement modes, and policy signing.
  

·                     Ability to manage large -scale deployments and troubleshoot
complex WDAC issues.

·                     Preferred Experience:

• Previous experience
  implementing WDAC in enterprise environments.
  
• Ivanti application control
  understanding
  
• Understanding of Zero Trust
  security models and compliance frameworks.
  
• Knowledge of ASD Essential
  Eight or similar security hardening guidelines.