Job Title

Contract (6 Months) | Potential ExtensionMillenilink is partnering with a large enterprise organization seeking an experienced Endpoint Security Lead to support a major endpoint hardening, application control, and endpoint security transformation initiative within a large-scale Windows environment.This opportunity is ideal for a senior-level security professional with both architecture and operational experience who can advise on best practices, evaluate tooling, architect solutions, and lead hands-on implementation across enterprise desktop and laptop environments.ResponsibilitiesContribute to endpoint security architecture decisions, standards, and roadmap planningEnsure endpoints comply with internal security standards, regulatory requirements, and audit expectationsAct as a subject matter expert supporting Security, Infrastructure, EUC, and broader business stakeholdersArchitect, implement, and maintain endpoint security controls across Windows 10 and Windows 11 environmentsLead endpoint hardening initiatives using CIS Controls, Microsoft Security Baselines, configuration standards, and policy controlsDesign and implement application control frameworks to restrict unauthorized software installation and executionConfigure and manage application allow-/deny-lists, software approval processes, and endpoint governance controlsImplement and enforce least-privilege access models across endpointsSecure and manage endpoint configurations relating to local drives, removable media, peripherals, local system tools, and browser usageConfigure and manage endpoint security policies through SCCM, Intune, Active Directory Group Policy, and Entra ID policiesEvaluate endpoint security tooling and recommend best-practice solutions aligned to operational and security requirementsSupport malware prevention, ransomware protection, exploit mitigation, and broader endpoint defense strategiesIntegrate endpoint telemetry into detection, alerting, monitoring, and incident response workflowsBalance security requirements with usability and operational practicality within enterprise environmentsSupport secure software packaging, deployment, and application lifecycle management processesCollaborate cross-functionally with Security, Infrastructure, and EUC teams on enterprise endpoint initiativesRequired Experience10+ years of experience in endpoint security, endpoint engineering, infrastructure security, or related disciplinesStrong experience operating in both security architecture and hands-on operational delivery capacitiesDeep expertise securing and managing Windows-based desktop and laptop environments at enterprise scaleStrong experience with SCCM, Intune, Active Directory Group Policy, and Entra ID policy administration Experience with endpoint security platforms such as CrowdStrike, Microsoft Defender, Symantec Endpoint Protection, or similar technologies Proven experience implementing endpoint hardening standards, security baselines, and application control mechanismsStrong understanding of Zero Trust and defender-first endpoint security modelsKnowledge of local, domain, and tenant-level administrative privilege modelsExperience restricting and governing endpoint application installations and browser/application usageExperience working within large enterprise environments with complex endpoint ecosystemsKnowledge of scripting and automation for troubleshooting, deployment, and operational efficiencyStrong stakeholder engagement, communication, and leadership capabilitiesIf youre interested in learning more, please apply directly or contact the Millenilink team for additional details.