Microsoft Endpoint Management Engineer

Role Overview

• Design, implement, and manage multi-tier MECM infrastructures, including Central Administration Sites (CAS), Primary Sites, and Secondary Sites supporting a geographically distributed network.
• Plan and execute MECM version upgrades, site migrations, and cloud-hosted deployments within Microsoft Azure environments.
• Develop and maintain MECM functions such as application deployment, patch management, operating system deployment (OSD), and compliance baselines.
• Administer and optimize SQL Server databases for MECM, including replication, indexing, and query performance tuning.
• Integrate MECM with Intune, Entra ID (Azure AD), Automation platforms, and other cloud services as part of hybrid management strategies.
• Collaborate with cybersecurity teams to implement DISA STIGs, vulnerability mitigation, and endpoint protection integration.
• Establish and maintain MECM role-based access control (RBAC), boundary groups, and distribution point hierarchies.
• Develop automation scripts in PowerShell to streamline MECM administrative functions and reporting.
• Provide Tier III/IV support for MECM operations and assist with troubleshooting enterprise endpoint management issues.
• Document system architecture, configurations, and standard operating procedures in accordance with enterprise engineering best practices.
• Design and document robust, scalable, and efficient solutions that align with business objectives.
• Lead the documentation and design phases of solutioning, ensuring comprehensive and clear communication of technical specifications and system architectures.
• Collaborate with cross-functional teams to translate business requirements into technical solutions.
• Ensure all solutions adhere to industry best practices and standards.
• Mentor and guide junior team members in documentation and design best practices.

Requirements

• 10+ Years of relevant experience
• 5+ years focused on MECM (SCCM) architecture and administration
• Active DoD Secret or higher clearance is required
• Candidate must be eligible for IT Level II (IAT-II) certification under DoD 8570 requirements. (Ex: Security+ or equivalent)
• Proven experience in system engineering and SDLC methodologies.
• Expert-level proficiency in MECM hierarchy design, including CAS, Primary, and Secondary sites, as well as Intune co-management configurations of endpoints in a hybrid environment.
• Expert-level proficiency in Windows Server (2016/2019/2022) administration and automation using PowerShell.
• Strong understanding of Active Directory, DNS, PKI, and Group Policy integration within MECM environments.
• Advanced SQL Server management and T-SQL query optimization skills specific to MECM databases.
• Experience with Microsoft Azure infrastructure and MECM cloud integration components.
• Knowledge of networking principles (TCP/IP, firewall, proxy configuration) and MECM communication ports.
• Experience in applying DoD STIGs, cybersecurity controls, and compliance reporting for MECM infrastructure.
• Strong communication, documentation, and leadership skills in enterprise operational environments.
• Strong ability to create detailed documentation and design artifacts, including system architecture diagrams, technical specifications, and process flows.
• Excellent communication skills to articulate complex technical concepts to both technical and non-technical stakeholders.
• Experience with various documentation tools and practices.
• Knowledge of agile and traditional SDLC methodologies.

Tech Stack

• Azure
• Cloud
• Cyber Security
• DNS
• SDLC
• SQL
• TCP/IP

Benefits

• healthcare
• wellness
• financial
• retirement
• family support
• continuing education
• time off benefits