Windows 11 Security Hardening Remediation Specialist - Remote

Are you a Windows 11 Specialist with 5+ years of experience configuring Hardening Standard review, and developing/implementing robust hardening policies across endpoint layers—bridging the gap between core OS configurations, specialized applications, and database layers. Our Alberta-based Financial client is seeking a Windows 11 Specialist for a 6 month contract.

Client: Financial Services
Duration: 6 months
Location: Remote
Pay Rate: between $63-79/hr INC

Advantages
• Advance your career by working with a top financial institution in Alberta.

Responsibilities
we are seeking dedicated Security Configuration Management (SCM) Lifecycle Specialists to lead and execute critical security hardening and remediation efforts. This project builds upon our existing operating system foundations to holistically secure our environment, minimize the attack surface, and achieve alignment with industry best practices (such as CIS Benchmarks and NIST).
You will perform comprehensive gap analyses, collaborate with Cybersecurity Governance on the Configuration Hardening Standard review, and develop/implement robust hardening policies across our endpoint layers—bridging the gap between core OS configurations, specialized applications, and database layers.
Core Responsibilities
Gap Analysis & Assessment: Conduct a deep-dive gap analysis of the current Windows fleet against Cybersecurity Governance Hardening Standards.
Policy Development: Work with subject matter experts, security, and governance teams to derive hardened configuration baseline documentation in alignment with the Configuration Hardening Standard.
Technical Implementation: Author, refine, and maintain Group Policy Objects (GPOs), configuration profiles, and PowerShell remediation scripts.
Up-the-Stack Integration: Ensure Windows 11 endpoint security configurations seamlessly align with the hardening requirements of specialized local applications, databases, and refined port/protocol management.
Remediation Execution: Lead the phased rollout of OS-level hardening configurations across the enterprise, minimizing user disruption while maximizing defensive posture.
Cross-Functional Collaboration: Partner with the Windows Engineering, Identity & Access Management (IAM), and Cybersecurity Governance teams to ensure compliance.
Training, testing and documentation is required to be delivered.
Technical Requirements
OS Expertise: Deep technical knowledge of Windows enterprise security architecture (e.g., Credential Guard, Virtualization-based Security, BitLocker).
Unified Endpoint Management (UEM): Advanced experience managing and deploying security policies via unified endpoint management platforms, including Omnissa Workspace One or Active Directory GPOs.
Automation: Proficiency in PowerShell for writing automated remediation and compliance-checking scripts.
Security Frameworks: Strong familiarity with CIS Benchmarks, NIST SP 800-53, or DISA STIGs specifically mapped to Microsoft environments.

Qualifications
Top Skills: Network Fundamentals: Solid understanding of ports, protocols, and services management to support the project's network-layer scope.
Analytical Mindset: Ability to translate complex compliance documents (like a Governance Standard) into technical, actionable engineering requirements.
Communication: Strong documentation skills for creating hardening standards, change management plans, and remediation playbooks.

Summary
If you're looking for a challenging yet rewarding opportunity that allows you to make a significant impact and grow your career, apply now and become an integral part of our client's mission to deliver excellence . Please apply directly to this ad or reach out to your Randstad Digital representative immediately!

P.S. Don’t forget that when you update your profile on Randstad.ca it helps us find you faster when we do have roles that match your skills! So even if this role isn’t for you please update your profile so we can find you!

We look forward to supporting you in your job search!

Good luck!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.