← Back to jobs

System Engineer | Intune, WDAC and Endpoint Security

  • Remote
  • Sweden
  • English
  • Posted 23.09.26 22:09

Endpoint Engineer | Intune, WDAC and Endpoint SecurityContract | Fully remote across Europe | 20 or 40 hours per week | Start ASAP Recann is recruiting on behalf of a confidential client for a device management project expected to run until the end of December 2026. The client has two workstreams: WDAC design and rollout through Intune, and endpoint security, patching and application deployment. They will consider one consultant covering both at approximately 40 hours per week, or two specialists working approximately 20 hours per week each. Candidates with experience in either workstream are welcome to apply. WDAC and application controlYou will design and implement Windows Defender Application Control (WDAC) from the ground up. This includes defining the policy approach, establishing an approved application baseline, creating allow and block rules, testing and managing exceptions, and rolling out policies through Microsoft Intune. You will document the solution and hand it over to the operational team. For this workstream, you must have personally delivered a WDAC implementation. Experience managing Microsoft Edge or Google Chrome extensions would be useful. Endpoint security, patching and application management You will configure and support endpoint security controls, including Attack Surface Reduction (ASR) rules and controls for USB devices and removable media. The work also covers Windows and third-party application patching, application packaging and deployment through Intune, troubleshooting failed installations, and operational documentation. For this workstream, you need hands-on Intune experience across endpoint controls and application deployment or patching. Windows Autopatch and RoboPack experience would be useful. To apply, please send your CV and tell us which workstream fits your experience, when you could start, how many hours you can commit each week and your hourly rate. The client’s identity and further project details will be shared with suitable candidates as the process progresses.