Endpoint Security Lead

Position: Endpoint Security Lead - Millenilink )
Contract (6 Months) | Potential Extension  Millenilink is partnering with a large enterprise organization seeking an experienced Endpoint Security Lead to support a major endpoint hardening, application control, and endpoint security transformation initiative within a large-scale Windows environment.
This opportunity is ideal for a senior-level security professional with both architecture and operational experience who can advise on best practices, evaluate tooling, architect solutions, and lead hands‑on implementation across enterprise desktop and laptop environments.
Responsibilities   Contribute to endpoint security architecture decisions, standards, and roadmap planning
Ensure endpoints comply with internal security standards, regulatory requirements, and audit expectations
Act as a subject matter expert supporting Security, Infrastructure, EUC, and broader business stakeholders
Architect, implement, and maintain endpoint security controls across Windows 10 and Windows 11 environments
Lead endpoint hardening initiatives using CIS Controls, Microsoft Security Baselines, configuration standards, and policy controls
Design and implement application control frameworks to restrict unauthorized software installation and execution
Configure and manage application allow-/deny-lists, software approval processes, and endpoint governance controls
Implement and enforce least‑privilege access models across endpoints
Secure and manage endpoint configurations relating to local drives, removable media, peripherals, local system tools, and browser usage
Configure and manage endpoint security policies through SCCM, Intune, Active Directory Group Policy, and Entra
Evaluate endpoint security tooling and recommend best‑practice solutions aligned to operational and security requirements
Support malware prevention, ransomware protection, exploit mitigation, and broader endpoint defense strategies
Integrate endpoint telemetry into detection, alerting, monitoring, and incident response workflows
Balance security requirements with usability and operational practicality within enterprise environments
Support secure software packaging, deployment, and application lifecycle management processes
Collaborate cross‑functionally with Security, Infrastructure, and EUC teams on enterprise endpoint initiatives
Required Experience   10+ years of experience in endpoint security, endpoint engineering, infrastructure security, or related disciplines
Strong experience operating in both security architecture and hands‑on operational delivery capacities
Deep expertise securing and managing Windows‑based desktop and laptop environments at enterprise scale
Strong experience with SCCM, Intune, Active Directory Group Policy, and Entra y administration

Experience with endpoint security platforms such as Crowd Strike, Microsoft Defender, Symantec Endpoint Protection, or similar technologies
Proven experience implementing endpoint hardening standards, security baselines, and application control mechanisms
Strong understanding of Zero Trust and defender‑first endpoint security models
Knowledge of local, domain, and tenant‑level administrative privilege models
Experience restricting and governing endpoint application installations and browser/application usage
Experience working within large enterprise environments with complex endpoint ecosystems
Knowledge of scripting and automation for troubleshooting, deployment, and operational efficiency
Robust stakeholder engagement, communication, and leadership capabilities
If you’re interested in learning more, please apply directly or contact the Millenilink team for additional details.

#J-18808-Ljbffr