Endpoint Systems Management Engineer
Job Summary
The Endpoint Systems Management Engineer joins the Vulnerability Management Team to support security, patching, and administration for a Department of War Agency. The role focuses on MECM/SCCM environment ownership, endpoint lifecycle management, and enterprise infrastructure support. The candidate will engage in system administration across physical and virtual environments, ensuring operational compliance and security.
Responsibilities
- Manage MECM/SCCM environment
- Oversee endpoint lifecycle and imaging
- Lead enterprise patch management
- Support Active Directory and PKI
- Integrate Microsoft 365 and Intune
Required Skills
- MECM/SCCM
- PowerShell/Bash scripting
- Windows Server Administration
- Security+ Certification
- Active Secret Clearance
Job Details
Primary Responsibilities:
- Provide full administration and ownership of the MECM (SCCM) environment, including management of a consolidated single-site hierarchy following CAS and secondary site decommissioning.
- Manage a distributed endpoint environment across ~30 remote sites, including oversight of Management Points (MPs) and Distribution Points (DPs) to ensure efficient content delivery and system performance.
- Oversee endpoint lifecycle management, including: Operating system deployment (OSD) and imaging solutions for decentralized site-based imaging; Application packaging, deployment, and maintenance.
- Lead enterprise patch management operations, including: Server and workstation patching; WSUS administration and software update deployment; Compliance monitoring and remediation.
- Administer and support enterprise application management, including third-party platforms such as Adobe and Autodesk.
- Perform Active Directory engineering and support, including: Group Policy design and management for servers and workstations; Certificate Services and PKI administration.
- Support infrastructure engineering and modernization efforts, including: Server builds, upgrades, and OS migrations (Windows Server 2016 → 2019 → 2025); Deployment of new Distribution Points and infrastructure components; Implementation of security controls such as Secure Boot; Build and maintain systems aligned with DoD/DWIA or secure environment requirements.
- Support and integrate Microsoft 365 and Intune, including: Application deployment; Configuration policies; Endpoint management modernization initiatives.
- Collaborate with infrastructure teams supporting virtualized environments (Nutanix hypervisor).
Basic Qualifications:
- Bachelor's degree with a minimum of 4 years of relevant experience, or equivalent combination of education and experience (Master's: 2 years, Associate's: 6 years, High School: 8 years).
- Experience with the development of PowerShell, Bash, or other scripting languages.
- Experience with MECM/SCCM.
- Positive attitude and high-energy approach to IT support.
- Excellent oral and written communication skills.
- Familiarity with Windows server operating systems in physical and virtual environments.
- Security + or equivalent certification.
- Must have US Citizenship.
- Must have an active Interim Secret or Secret clearance or be able to obtain an Interim Secret clearance.
Preferred Qualifications:
- Experience with M365 and Microsoft Intune.
- IT Operations-related technical certifications (A+, Net+, Sec+, MTA, etc.).