Endpoint Hardening Architect — WDAC, AppLocker & Intune

Xintas; Antwerpen; Hybride; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Xintas in Belgium seeks a security architect to lead end-to-end design, implementation, and deployment of WDAC and AppLocker across a large enterprise. You will integrate these controls with Microsoft Intune and Defender to create a controlled, measurable adoption pathway across the organization.

You will drive a phased rollout with governance of exceptions, policy management, and continuous optimization while collaborating with SOC, IT Operations, and development teams to monitor telemetry and

Qualifications

• Extensive hands-on experience with WDAC, AppLocker, Microsoft Intune, Microsoft Defender, and Windows endpoint management.
• Strong background in endpoint security, system hardening, Zero Trust architectures, and default-deny security models.
• Experience working in large-scale enterprise environments and managing organization-wide deployments.
• Strong analytical skills with the ability to interpret telemetry, security events, and log data.
• Excellent communication skills with the ability to clearly explain technical decisions and security recommendations.

Responsabilités

• Design and implement an enterprise-wide hardening framework for Windows endpoints.
• Translate security requirements into technical configurations, policies, and security baselines.
• Implement WDAC and/or AppLocker.
• Establish a reliable code-signing and trust model.
• Define governance processes for application exceptions and policy management.

Connaissances

Endpoint security

Zero Trust

Telemetry analysis

Stakeholder communication

Policy governance

Outils

WDAC

AppLocker

Microsoft Intune

Microsoft Defender

Windows endpoint management

Description du poste

Xintas in Belgium seeks a security architect to lead end-to-end design, implementation, and deployment of WDAC and AppLocker across a large enterprise. You will integrate these controls with Microsoft Intune and Defender to create a controlled, measurable adoption pathway across the organization.

You will drive a phased rollout with governance of exceptions, policy management, and continuous optimization while collaborating with SOC, IT Operations, and development teams to monitor telemetry and