Microsoft Defender for Endpoint Migration Specialist in Swindon

Microsoft Defender for Endpoint Administrator – Active SC Clearance – Long Term

This specialist role focuses on leading the secure migration of Windows and Linux servers from legacy antivirus solutions to Microsoft Defender for Endpoint in a highly sensitive nuclear environment.

You will design and execute a compliant migration strategy, configure policies, and maintain strong endpoint protection while meeting strict regulatory standards.

You will validate existing antivirus exclusion policies across the estate, create targeted Azure AD device groups for policy deployment, develop a tailored migration approach for complex environments, test network connectivity to Defender services, prepare and distribute installation packages, and collaborate with the image management team to integrate Defender into autoscaling golden images. Additional tasks include removing legacy solutions, documenting deployment approaches and policies, and providing end-to-end support for Microsoft Defender.

Essential qualifications

• Active UK SC security clearance, used within the last 12 months with at least 3 months remaining before the 12-month lapse period
• Proven hands-on experience onboarding Windows and Linux servers to Microsoft Defender for Endpoint
• Successful management of complex antivirus migrations in regulated environments
• Strong knowledge of Microsoft Defender technologies including Defender for Endpoint, Defender for Office 365, Defender for Identity, Microsoft 365 Defender, and Cloud App Security
• Practical experience with Endpoint Detection and Response, Threat & Vulnerability Management, Attack Surface Reduction, and Automated Investigation and Remediation
• In-depth understanding of Windows Client (7/8/10), Server (2008–2016), and Red Hat Enterprise Linux operating systems
• Demonstrable skills in exclusion management, policy creation, deployment via GPO/SCCM/Intune, and legacy AV removal

Desirable experience includes Symantec Endpoint Protection Manager and McAfee server policy configuration.