Implement andmaintainendpoint security controls, including BitLocker, Microsoft Defender, Windows LAPS, WindowsHello forBusiness,firewallpolicies, attack surface reduction rules, and security baselines. Act as the escalation point for complex endpoint issues involving Windows, Intune, Autopilot, SCCM, application deployment, compliance, authentication, and device management.