Lead Engineer

Job Requirements
At Quest Global, it’s not just what we do but how and why we do it that makes us different. With over 25 years as an engineering services provider, we believe in the power of doing things differently to make the impossible possible. Our people are driven by the desire to make the world a better place—to make a positive difference that contributes to a brighter future. We bring together technologies and industries, alongside the contributions of diverse individuals who are empowered by an intentional workplace culture, to solve problems better and faster.
Key Responsibilities
We are known for our extraordinary people who make the impossible possible every day. Questians are driven by hunger, humility, and aspiration. We believe that our company culture is the key to our ability to make a true difference in every industry we reach. Our teams regularly invest time and dedicated effort into internal culture work, ensuring that all voices are heard.
We wholeheartedly believe in the diversity of thought that comes with fostering a culture rooted in respect, where everyone belongs, is valued, and feels inspired to share their ideas. We know embracing our unique differences makes us better, and that solving the worlds hardest engineering problems requires diverse ideas, perspectives, and backgrounds. We shine the brightest when we tap into the many dimensions that thrive across over 21,000 difference-makers in our workplace.
Work Experience
Senior Endpoint Security & Governance Consultant (Contract)
Location: Remote / Hybrid
Duration: 6-12 Months
Start: Immediate
Experience: 8+ Years
About The Opportunity
We are looking for a highly skilled Endpoint Security & Governance Consultant to support a large-scale Cyber Security and Endpoint Hardening Programme. The successful candidate will lead the implementation of application control, browser governance, endpoint security baselines, USB/device control, and Microsoft Intune policy management across a global enterprise environment.
This is an excellent opportunity for a hands-on consultant who combines strong technical expertise with governance, stakeholder management, and enterprise-scale deployment experience.
Key Responsibilities
Lead discovery and analysis of applications, scripts, Office add-ins, browsers, browser extensions and USB device usage.
Design and implement Windows Defender Application Control (WDAC) policies, including audit, enforcement and rollback strategies.
Establish application trust models, managed installers, exception processes and governance controls.
Govern Office add-ins, browser extensions and emerging AI productivity tools.
Design and implement CIS-aligned browser security standards for Microsoft Edge and Google Chrome.
Standardise browser configurations and drive phased removal of non-approved browsers.
Develop and deploy Microsoft Intune security, compliance, configuration and application policies.
Design and implement USB and removable media control solutions.
Execute pilot testing, phased deployments and enterprise-wide rollouts.
Create governance processes covering exceptions, recertification, reporting and audit readiness.
Produce architecture documentation, operational runbooks and compliance reporting.
Essential Skills & Experience
Microsoft Intune
Windows Defender Application Control (WDAC)
Microsoft Defender for Endpoint
Microsoft Defender XDR
Microsoft Entra ID
Endpoint Security and Compliance Policies
PowerShell Scripting
Microsoft Edge Enterprise Management
Chrome Enterprise Management
Application Allowlisting and Software Governance
USB / Device Control Solutions
CIS Benchmarks
Zero Trust Security Principles
Enterprise Security Governance
Desirable Skills
Microsoft Purview
Microsoft Sentinel
Defender for Cloud Apps
Conditional Access
Privileged Identity Management (PIM)
Tanium
Nexthink
Splunk
ServiceNow
Power BI
Azure Automation
Power Automate
Jira / Confluence
Preferred Certifications
Microsoft Certified: Endpoint Administrator Associate
Microsoft Security Operations Analyst Associate
Microsoft Cybersecurity Architect Expert
CISSP, CISM, CCSP or equivalent security certification
Ideal Candidate
You will have proven experience delivering enterprise endpoint security and hardening programmes, with expertise across WDAC, Intune, Defender, browser security, application governance and device control. You will be comfortable operating across architecture, engineering, governance, compliance and deployment workstreams while engaging effectively with security, infrastructure, workplace technology and business stakeholders.
Key Deliverables
Application & Add-in Governance Framework
WDAC Audit & Enforcement Deployment
Browser Standardisation Programme
Browser Extension Governance Framework
Endpoint Security & Compliance Baselines
USB / Device Control Implementation
Exception & Recertification Process
Compliance Dashboards & Reporting
Operational Runbooks and Knowledge Transfer

Work arrangement
Hybrid