Endpoint Security Lead (Brossard)

Contract (6 Months) | Potential Extension Millenilink is partnering with a large enterprise organization seeking an experienced Endpoint Security Lead to support a major endpoint hardening, application control, and endpoint security transformation initiative within a large-scale Windows setting. This opportunity is ideal for a senior-level security professional with both architecture and operational experience who can advise on best practices, evaluate tooling, architect solutions, and lead hands-on implementation across enterprise desktop and laptop environments. Responsibilities - Contribute to endpoint security architecture decisions, standards, and roadmap planning - Ensure endpoints comply with internal security standards, regulatory requirements, and audit expectations - Act as a subject matter expert supporting Security, Infrastructure, EUC, and broader business stakeholders - Architect, implement, and maintain endpoint security controls across Windows 10 and Windows 11 environments - Lead endpoint hardening initiatives using CIS Controls, Microsoft Security Baselines, configuration standards, and policy controls - Design and implement application control frameworks to restrict unauthorized software installation and execution - Configure and manage application allow-/deny-lists, software approval processes, and endpoint governance controls - Implement and enforce least-privilege access models across endpoints - Secure and manage endpoint configurations relating to local drives, removable media, peripherals, local system tools, and browser usage - Configure and manage endpoint security policies through SCCM, Intune, Active Directory Group Policy, and Entra ID policies - Evaluate endpoint security tooling and recommend best-practice solutions aligned to operational and security requirements - Support malware prevention, ransomware protection, exploit mitigation, and broader endpoint defense strategies - Integrate endpoint telemetry into detection, alerting, monitoring, and incident response workflows - Balance security requirements with usability and operational practicality within enterprise environments - Support secure software packaging, deployment, and application lifecycle management processes - Collaborate cross-functionally with Security, Infrastructure, and EUC teams on enterprise endpoint initiatives Required Experience - 10+ years of experience in endpoint security, endpoint engineering, infrastructure security, or related disciplines - Strong experience operating in both security architecture and hands-on operational delivery capacities - Deep expertise securing and managing Windows-based desktop and laptop environments at enterprise scale - Strong experience with SCCM, Intune, Active Directory Group Policy, and Entra ID policy administration - Experience with endpoint security platforms such as CrowdStrike, Microsoft Defender, Symantec Endpoint Protection, or similar technologies - Proven experience implementing endpoint hardening standards, security baselines, and application control mechanisms - Strong understanding of Zero Trust and defender-first endpoint security models - Knowledge of local, domain, and tenant-level administrative privilege models - Experience restricting and governing endpoint application installations and browser/application usage - Experience working within large enterprise environments with complex endpoint ecosystems - Knowledge of scripting and automation for troubleshooting, deployment, and operational efficiency - Strong stakeholder engagement, communication, and leadership capabilities If you’re interested in learning more, please apply directly or contact the Millenilink team for additional details. Apply on Kit Job: kitjob.ca/job/2no7dh