Microsoft Defender for Endpoint (MDE) SME - Implementation Team Lead

We are looking for an experienced Microsoft Defender for Endpoint (MDE) SME / Implementation Team Lead to lead enterprise-wide endpoint security implementation and migration activities. The successful candidate will be responsible for translating approved MDE designs into production-ready configurations, leading endpoint onboarding and security policy deployment, and managing migrations from existing antivirus/EDR platforms to Microsoft Defender for Endpoint.

Key Responsibilities

• Lead end-to-end Microsoft Defender for Endpoint implementation activities covering:
• • Endpoint onboarding
  • Endpoint Detection and Response (EDR)
  • Microsoft Defender Antivirus
  • Attack Surface Reduction (ASR)
  • Endpoint Security
  • Device Control
  • Web Protection
  • Network Protection
  • Automated Investigation and Remediation
  • Indicators
  • Advanced Hunting
  • Threat & Vulnerability Management
• Lead migration from existing antivirus, EDR, or endpoint-protection platforms to Microsoft Defender for Endpoint.
• Manage migration activities including:
• • Endpoint discovery
  • Compatibility assessment
  • Coexistence/passive mode
  • Pilot groups
  • Deployment rings
  • Phased enforcement
  • Production cutover
  • Validation
  • Rollback planning
  • Legacy agent removal
• Translate approved MDE architecture and detailed designs into:
• • Configuration workbooks
  • Implementation plans
  • Build procedures
  • Migration procedures
  • Test cases
  • Deployment plans
  • Technical documentation
• Lead MDE onboarding, configuration walkthroughs, technical testing, policy validation, migration validation, defect resolution, and deployment-readiness activities.
• Maintain:
• • Configuration records
  • Migration trackers
  • Test evidence
  • Implementation trackers
  • RAID logs
  • Policy inventories
  • Technical runbooks
  • Rollback procedures
  • Knowledge-transfer materials
• Work closely with Security Operations, Identity, Endpoint, IT Security, Infrastructure, and client teams to ensure successful implementation and production rollout.
• Lead technical discussions, troubleshoot implementation issues, and provide practical recommendations throughout the deployment lifecycle.

Mandatory Technical Skills

• Strong hands-on experience with Microsoft Defender for Endpoint (MDE).
• Enterprise MDE implementation and deployment experience.
• Strong knowledge of:
• • MDE onboarding
  • EDR
  • Defender Antivirus
  • Attack Surface Reduction (ASR)
  • Endpoint Security
  • Device Control
  • Web Protection
  • Network Protection
  • Automated Investigation & Remediation
  • Indicators
  • Advanced Hunting
  • Threat & Vulnerability Management
• Experience implementing MDE across:
• • Windows 10/11
  • Windows Servers
  • Mobile devices
  • VDI environments
  • Cloud-hosted endpoints
• Good understanding of:
• • Microsoft Entra ID / Azure AD
  • Group Policy
  • Microsoft Intune
  • Microsoft Defender XDR
  • Role-Based Access Control (RBAC)
  • Device Groups

Critical Requirement – AV/EDR Migration

Candidates must have practical experience migrating enterprise endpoints from third-party antivirus/EDR platforms to Microsoft Defender for Endpoint.

Experience should include:

Discovery Compatibility Assessment Coexistence/Passive Mode Pilot Deployment Rings Phased Migration Enforcement Validation Rollback Legacy Agent Removal

Consulting & Leadership Skills

• Ability to lead MDE implementation and migration activities independently.
• Strong technical communication and stakeholder-management skills.
• Ability to conduct technical workshops and configuration walkthroughs.
• Experience coordinating with Security Operations, Identity, Endpoint, IT Security, and client delivery teams.
• Strong ownership and structured delivery-management capabilities.
• Ability to convert approved designs into tested, validated, and production-ready configurations.

Documentation & Knowledge Transfer

Experience creating and maintaining:

• Configuration workbooks
• Implementation plans
• Test cases and evidence
• Migration trackers
• Technical runbooks
• Rollback procedures
• Policy inventories
• Knowledge-transfer materials
• Implementation and deployment documentation

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related discipline is preferred.

Preferred Microsoft Certifications

• SC-200 – Security Operations Analyst
• MD-102 – Endpoint Administrator
• SC-900 – Security, Compliance, and Identity Fundamentals
• SC-100 – Cybersecurity Architect
• AZ-500 – Azure Security Engineer
• SC-300 – Identity and Access Administrator

Preferred Experience

Enterprise-scale MDE implementation experience.

Large-scale endpoint security modernization or transformation projects.

Third-party AV/EDR migration to MDE.

MDE architecture/design handover experience.

Endpoint discovery and prerequisite assessment.

Pilot onboarding and phased deployment.

Unit testing, integration testing and UAT.

Production rollout and enforcement.

Legacy security-agent removal.

Experience leading technical implementation teams.