Senior Microsoft App Control (WDAC) Architect / Consultant

Senior Microsoft App Control (WDAC) Architect / Consultant

Job Type: Contract (3–6 Months)

Location: 100% Remote

Industry: Healthcare / Enterprise Hospital System

Compensation: Market Rate / Competitive Hourly Contract

Position Overview

We are seeking an experiencedMicrosoft App Control for Business (WDAC) Architect / Consultant to lead the strategy, design, and initial implementation of an enterprise-wide application control framework for a major healthcare provider supporting70,000+ Windows endpoints.

This is a hands-on technical consulting engagement. You will evaluate current endpoint security posture, architect scalable application trust policies, execute phased pilot rollouts, and establish an operational governance framework that will be seamlessly transitioned to an internal engineering team.

Key Responsibilities

• Strategy & Roadmap: Evaluate current endpoint application inventory, software delivery pipelines, and security governance practices to build a multi-phase WDAC enterprise roadmap.

• Policy Design & Architecture: Architect App Control for Business allow-listing policies, rule strategies (publisher, code-signing, path, and hash rules), and exception management procedures tailored to enterprise healthcare workflows.

• Pilot & Phased Rollout: Establish deployment rings, testing methodologies, and fast-rollback strategies. Implement staged policies starting inAudit Mode before migrating critical segments toEnforcement Mode.

• Ecosystem Integration: Integrate App Control policies withMicrosoft Intune,Microsoft Defender for Endpoint (MDE), custom PowerShell automation, and existing enterprise deployment tools.

• Operational Handover: Author production runbooks, standard operating procedures (SOPs), and governance standards. Mentor and train the client's internal endpoint administration team for post-implementation management.

Required Experience & Technical Skills

• Proven Track Record: Architected and deployed Microsoft App Control for Business / WDAC at scale (10,000+ endpoints required; enterprise scale preferred).

• Core Microsoft Stack:

  • Microsoft App Control for Business (WDAC) / AppLocker

  • Microsoft Intune (MEM) and Policy Deployment Strategies

  • Microsoft Defender for Endpoint (MDE) & Advanced KQL Log Analysis

  • Windows 10/11 Enterprise OS Internals

• Automation: AdvancedPowerShell scripting for policy generation, log parsing, and endpoint orchestration.

• Application Governance: Deep understanding of Zero Trust architecture, application allow-listing, code signing, and balancing tight security controls with business operational continuity.

Preferred Qualifications

• Industry Experience: Background inHealthcare, financial services, or strictly regulated enterprise environments.

• Certifications: Microsoft Certified: Cybersecurity Architect Expert (SC-100), Security Operations Analyst (SC-200), or Identity and Access Administrator (SC-300).

• Operational Strategy: Demonstrated success creating operational runbooks and leading knowledge-transfer initiatives to permanent internal staff.