Lead Engineer

<strong>Job Requirements </strong><br><p>At Quest Global, it’s not just what we do but how and why we do it that makes us different. With over 25 years as an engineering services provider, we believe in the power of doing things differently to make the impossible possible. Our people are driven by the desire to make the world a better place—to make a positive difference that contributes to a brighter future. We bring together technologies and industries, alongside the contributions of diverse individuals who are empowered by an intentional workplace culture, to solve problems better and faster.</p><p> </p><p><strong>Key Responsibilities</strong></p><ul><li>Lead discovery and analysis of applications, scripts, Office add-ins, browsers, browser extensions and USB device usage.</li><li>Design and implement <strong>Windows Defender Application Control (WDAC)</strong> policies, including audit, enforcement and rollback strategies.</li><li>Establish application trust models, managed installers, exception processes and governance controls.</li><li>Govern Office add-ins, browser extensions and emerging AI productivity tools.</li><li>Design and implement CIS-aligned browser security standards for Microsoft Edge and Google Chrome.</li><li>Standardise browser configurations and drive phased removal of non-approved browsers.</li><li>Develop and deploy Microsoft Intune security, compliance, configuration and application policies.</li><li>Design and implement USB and removable media control solutions.</li><li>Execute pilot testing, phased deployments and enterprise-wide rollouts.</li><li>Create governance processes covering exceptions, recertification, reporting and audit readiness.</li><li>Produce architecture documentation, operational runbooks and compliance reporting.</li></ul><p> </p><p>We are known for our extraordinary people who make the impossible possible every day. Questians are driven by hunger, humility, and aspiration. We believe that our company culture is the key to our ability to make a true difference in every industry we reach. Our teams regularly invest time and dedicated effort into internal culture work, ensuring that all voices are heard.</p><p> </p><p>We wholeheartedly believe in the diversity of thought that comes with fostering a culture rooted in respect, where everyone belongs, is valued, and feels inspired to share their ideas. We know embracing our unique differences makes us better, and that solving the worlds hardest engineering problems requires diverse ideas, perspectives, and backgrounds. We shine the brightest when we tap into the many dimensions that thrive across over 21,000 difference-makers in our workplace.</p><br><br><strong>Work Experience </strong><br><p><strong>Senior Endpoint Security & Governance Consultant </strong></p><p><strong>Location:</strong> Remote / Hybrid</p><p><strong>Start:</strong> Immediate</p><p><strong>Experience:</strong> 8+ Years</p><p><strong>About the Opportunity</strong></p><p>We are looking for a highly skilled <strong>Endpoint Security & Governance Consultant</strong> to support a large-scale Cyber Security and Endpoint Hardening Programme. The successful candidate will lead the implementation of application control, browser governance, endpoint security baselines, USB/device control, and Microsoft Intune policy management across a global enterprise environment.</p><p>This is an excellent opportunity for a hands-on consultant who combines strong technical expertise with governance, stakeholder management, and enterprise-scale deployment experience.</p><p><br></p><p><strong>Essential Skills & Experience</strong></p><ul><li>Microsoft Intune</li><li>Windows Defender Application Control (WDAC)</li><li>Microsoft Defender for Endpoint</li><li>Microsoft Defender XDR</li><li>Microsoft Entra ID</li><li>Endpoint Security and Compliance Policies</li><li>PowerShell Scripting</li><li>Microsoft Edge Enterprise Management</li><li>Chrome Enterprise Management</li><li>Application Allowlisting and Software Governance</li><li>USB / Device Control Solutions</li><li>CIS Benchmarks</li><li>Zero Trust Security Principles</li><li>Enterprise Security Governance</li></ul><p><strong>Desirable Skills</strong></p><ul><li>Microsoft Purview</li><li>Microsoft Sentinel</li><li>Defender for Cloud Apps</li><li>Conditional Access</li><li>Privileged Identity Management (PIM)</li><li>Tanium</li><li>Nexthink</li><li>Splunk</li><li>ServiceNow</li><li>Power BI</li><li>Azure Automation</li><li>Power Automate</li><li>Jira / Confluence</li></ul><p><strong>Preferred Certifications</strong></p><ul><li>Microsoft Certified: Endpoint Administrator Associate</li><li>Microsoft Security Operations Analyst Associate</li><li>Microsoft Cybersecurity Architect Expert</li><li>CISSP, CISM, CCSP or equivalent security certification</li></ul><p><strong>Ideal Candidate</strong></p><p>You will have proven experience delivering enterprise endpoint security and hardening programmes, with expertise across <strong>WDAC, Intune, Defender, browser security, application governance and device control</strong>. You will be comfortable operating across architecture, engineering, governance, compliance and deployment workstreams while engaging effectively with security, infrastructure, workplace technology and business stakeholders.</p><p><strong>Key Deliverables</strong></p><ul><li>Application & Add-in Governance Framework</li><li>WDAC Audit & Enforcement Deployment</li><li>Browser Standardisation Programme</li><li>Browser Extension Governance Framework</li><li>Endpoint Security & Compliance Baselines</li><li>USB / Device Control Implementation</li><li>Exception & Recertification Process</li><li>Compliance Dashboards & Reporting</li><li>Operational Runbooks and Knowledge Transfer</li></ul><p> </p><br><br>