Lead Engineer

Role overview

Lead Engineer at Quest Global

We are known for our extraordinary people who make the impossible possible every day.

Responsibilities

• Questians are driven by hunger, humility, and aspiration.
• We believe that our company culture is the key to our ability to make a true difference in every industry we reach.
• Our teams regularly invest time and dedicated effort into internal culture work, ensuring that all voices are heard.
• We wholeheartedly believe in the diversity of thought that comes with fostering a culture rooted in respect, where everyone belongs, is valued, and feels inspired to share their ideas.
• We know embracing our unique differences makes us better, and that solving the worlds hardest engineering problems requires diverse ideas, perspectives, and backgrounds.
• We shine the brightest when we tap into the many dimensions that thrive across over 21,000 difference-makers in our workplace.
• Work Experience .
• Senior Endpoint Security & Governance Consultant (Contract).

Required qualifications

• 8+ Years.
• About the Opportunity.
• We are looking for a highly skilled Endpoint Security & Governance Consultant to support a large-scale Cyber Security and Endpoint Hardening Programme.
• The successful candidate will lead the implementation of application control, browser governance, endpoint security baselines, USB/device control, and Microsoft Intune policy management across a global enterprise environment.
• This is an excellent opportunity for a hands-on consultant who combines strong technical expertise with governance, stakeholder management, and enterprise-scale deployment experience.
• Lead discovery and analysis of applications, scripts, Office add-ins, browsers, browser extensions and USB device usage.
• Design and implement Windows Defender Application Control (WDAC) policies, including audit, enforcement and rollback strategies.
• Establish application trust models, managed installers, exception processes and governance controls.
• Govern Office add-ins, browser extensions and emerging AI productivity tools.
• Design and implement CIS-aligned browser security standards for Microsoft Edge and Google Chrome.
• Standardise browser configurations and drive phased removal of non-approved browsers.
• Develop and deploy Microsoft Intune security, compliance, configuration and application policies.
• Design and implement USB and removable media control solutions.
• Execute pilot testing, phased deployments and enterprise-wide rollouts.
• Create governance processes covering exceptions, recertification, reporting and audit readiness.
• Produce architecture documentation, operational runbooks and compliance reporting.
• Essential Skills & Experience.
• Microsoft Intune.
• Windows Defender Application Control (WDAC).
• Microsoft Defender for Endpoint.
• Microsoft Defender XDR.
• Microsoft Entra ID.
• Endpoint Security and Compliance Policies.
• PowerShell Scripting.
• Microsoft Edge Enterprise Management.
• Chrome Enterprise Management.
• Application Allowlisting and Software Governance.
• USB / Device Control Solutions.
• CIS Benchmarks.
• Zero Trust Security Principles.
• Enterprise Security Governance.
• Microsoft Purview.
• Microsoft Sentinel.
• Defender for Cloud Apps.
• Conditional Access.
• Privileged Identity Management (PIM).
• Tanium.
• Nexthink.
• Splunk.
• ServiceNow.
• Power BI.
• Azure Automation.
• Power Automate.
• Jira / Confluence.
• Microsoft Certified: Endpoint Administrator Associate.
• Microsoft Security Operations Analyst Associate.
• Microsoft Cybersecurity Architect Expert.
• CISSP, CISM, CCSP or equivalent security certification.
• Ideal Candidate.
• You will have proven experience delivering enterprise endpoint security and hardening programmes, with expertise across WDAC, Intune, Defender, browser security, application governance and device control.
• You will be comfortable operating across architecture, engineering, governance, compliance and deployment workstreams while engaging effectively with security, infrastructure, workplace technology and business stakeholders.
• Key Deliverables.
• Application & Add-in Governance Framework.
• WDAC Audit & Enforcement Deployment.
• Browser Standardisation Programme.
• Browser Extension Governance Framework.
• Endpoint Security & Compliance Baselines.
• USB / Device Control Implementation.
• Exception & Recertification Process.
• Compliance Dashboards & Reporting.
• Operational Runbooks and Knowledge Transfer.

Preferred qualifications and skills

• Desirable Skills.
• Preferred Certifications.

Employment details

• Location: Remote / Hybrid.
• Duration: 6-12 Months.
• Start: Immediate.
• Location: Bangalore [Karnataka] [India]

About the employer

• At Quest Global, it’s not just what we do but how and why we do it that makes us different.

Additional role details

• Job Requirements .
• With over 25 years as an engineering services provider, we believe in the power of doing things differently to make the impossible possible.
• Our people are driven by the desire to make the world a better place—to make a positive difference that contributes to a brighter future.
• We bring together technologies and industries, alongside the contributions of diverse individuals who are empowered by an intentional workplace culture, to solve problems better and faster.