Windows 11 Security Hardening Remediation Specialist

• Conduct deep-dive gap analysis of current Windows fleet against Cybersecurity Governance Hardening Standards
• Work with subject matter experts, security, and governance teams to derive hardened configuration baseline documentation
• Author, refine, and maintain Group Policy Objects (GPOs), configuration profiles, and PowerShell remediation scripts
• Ensure Windows 11 endpoint security configurations align with hardening requirements of specialized local applications, databases, and refined port/protocol management
• Lead phased rollout of OS-level hardening configurations across the enterprise minimizing user disruption
• Partner with Windows Engineering, Identity & Access Management (IAM), and Cybersecurity Governance teams to ensure compliance
• Deliver training, testing and documentation

• 5+ years of experience configuring Hardening Standard review and developing/implementing robust hardening policies across endpoint layers
• Deep technical knowledge of Windows enterprise security architecture (Credential Guard, Virtualization-based Security, BitLocker)
• Advanced experience managing and deploying security policies via unified endpoint management platforms (Omnissa Workspace One or Active Directory GPOs)
• Proficiency in PowerShell for writing automated remediation and compliance-checking scripts
• Strong familiarity with CIS Benchmarks, NIST SP 800-53, or DISA STIGs specifically mapped to Microsoft environments
• Network Fundamentals: solid understanding of ports, protocols, and services management
• Analytical mindset to translate complex compliance documents into technical engineering requirements
• Strong documentation skills for creating hardening standards, change management plans, and remediation playbooks

Advance your career by working with a top financial institution in Alberta