Microsoft App Control for Business (WDAC) Consultant
ROLE: Microsoft App Control for Business (WDAC) Consultant Contract | Implementation Engagement | Remote Our client, a large enterprise with approximately 70,000 Windows endpoints, is seeking a Microsoft App Control for Business (formerly WDAC - Windows Defender Application Control) Consultant to lead the strategy, design, and initial implementation of an enterprise application control program. Microsoft describes App Control for Business as a security technology that helps ensure only trusted applications, scripts, and code can run on managed Windows devices. This is a hands-on consulting engagement focused on defining scope, building the framework, executing pilot implementations, and creating the operational model that will ultimately be transitioned to an internal full-time resource.
Responsibilities
Assess the client's current endpoint security, application inventory, and software governance practices. Develop an enterprise App Control for Business (WDAC) strategy and roadmap for 70,000+ endpoints. Design application trust and allow listing policies, governance processes, and exception management procedures. Establish pilot groups, deployment rings, testing methodologies, and rollback strategies. Implement initial App Control for Business policies in Audit and Enforcement modes where appropriate. App Control commonly supports staged deployments using audit-first approaches. Integrate with Microsoft Intune, Defender, endpoint management, and related Microsoft security technologies. Develop operational runbooks, documentation, governance standards, and knowledge transfer materials. Mentor and transition ownership to the client's newly hired internal administrator. Required Experience Proven experience leading enterprise App Control for Business (WDAC) deployments. Demonstrated success implementing application control frameworks across large-scale Windows environments (10,000+ endpoints preferred). Strong expertise with: Microsoft App Control for Business / WDAC Microsoft Intune Microsoft Defender Endpoint Security Windows 10/11 Enterprise PowerShell Automation Application Allowlisting and Zero Trust Security Experience balancing security requirements with end-user productivity and business application compatibility. Ability to create executive-level roadmaps, implementation plans, and operational governance models.
Preferred Qualifications
Microsoft security certifications (SC-200, SC-300, SC-100, or equivalent). Experience with large-scale endpoint transformation or security hardening initiatives. Experience developing long-term operational models and transition plans for internal support teams. Ideal Consultant Profile We are looking for someone who has successfully delivered App Control for Business / WDAC programs before, can advise leadership on scope and approach, execute the initial rollout, and leave behind a sustainable framework that an internal team can operate long-term. Duration: To be defined during scoping