WDAC Engineer — Windows Endpoint Security & Code Integrity

Digital Scripts, Inc.; Madison (WI); On-site; USD 120,000 - 170,000; Full time

Job summary

Digital Scripts, Inc. is seeking a seasoned Windows Defender Application Control (WDAC) Engineer in Madison, WI to design, deploy, and maintain WDAC policies across enterprise Windows endpoints and servers.

This long-term role requires deep expertise in policy creation, whitelisting, and code integrity. The engineer will collaborate with Security, Infrastructure, and Desktop Engineering teams to ensure robust endpoint protection, troubleshoot policy enforcement, and document configurations and

Qualifications

• WDAC experience designing and deploying policies.
• Proficient in Windows OS and Windows Server environments.
• Strong PowerShell scripting and policy automation.
• Experience with Group Policy (GPO) and Defender for Endpoint.
• Knowledge of application whitelisting and code integrity concepts.
• Solid understanding of endpoint security principles.

Responsibilities

• Design, deploy and maintain WDAC policies.
• Create and manage application whitelisting and code integrity policies.
• Troubleshoot policy blocks and enforcement issues.
• Collaborate with Security, Infrastructure and Desktop Engineering teams.
• Monitor endpoint security posture and suggest improvements.
• Support Microsoft Defender for Endpoint integrations.
• Document configurations and operational procedures.
• Perform policy testing, validation and change management.

Skills

WDAC

Windows OS

PowerShell

GPO

Defender for Endpoint

Application Whitelisting

Code Integrity

Endpoint Security

Job description

Digital Scripts, Inc. is seeking a seasoned Windows Defender Application Control (WDAC) Engineer in Madison, WI to design, deploy, and maintain WDAC policies across enterprise Windows endpoints and servers.

This long-term role requires deep expertise in policy creation, whitelisting, and code integrity. The engineer will collaborate with Security, Infrastructure, and Desktop Engineering teams to ensure robust endpoint protection, troubleshoot policy enforcement, and document configurations and