Microsoft Endpoint Management (MEM) Engineer

CACI International Inc is seeking an experienced Senior MECM Enterprise Engineer to join their dynamic IT team. The successful candidate will be responsible for the design, implementation, and lifecycle management of enterprise-scale MECM infrastructures that support mission-critical operations.

Responsibilities:

• Design, implement, and manage multi-tier MECM infrastructures, including Central Administration Sites (CAS), Primary Sites, and Secondary Sites supporting a geographically distributed network
• Plan and execute MECM version upgrades, site migrations, and cloud-hosted deployments within Microsoft Azure environments
• Develop and maintain MECM functions such as application deployment, patch management, operating system deployment (OSD), and compliance baselines
• Administer and optimize SQL Server databases for MECM, including replication, indexing, and query performance tuning
• Integrate MECM with Intune, Entra ID (Azure AD), Automation platforms, and other cloud services as part of hybrid management strategies
• Collaborate with cybersecurity teams to implement DISA STIGs, vulnerability mitigation, and endpoint protection integration
• Establish and maintain MECM role-based access control (RBAC), boundary groups, and distribution point hierarchies
• Develop automation scripts in PowerShell to streamline MECM administrative functions and reporting
• Provide Tier III/IV support for MECM operations and assist with troubleshooting enterprise endpoint management issues
• Document system architecture, configurations, and standard operating procedures in accordance with enterprise engineering best practices
• Design and document robust, scalable, and efficient solutions that align with business objectives
• Lead the documentation and design phases of solutioning, ensuring comprehensive and clear communication of technical specifications and system architectures
• Collaborate with cross-functional teams to translate business requirements into technical solutions
• Ensure all solutions adhere to industry best practices and standards
• Mentor and guide junior team members in documentation and design best practices

Requirements:

• 10+ Years of relevant experience (Bachelor's Degree in relevant field may be substituted for 5 years of relevant experience)
• 5+ years focused on MECM (SCCM) architecture and administration
• Active DoD Secret or higher clearance is required
• Candidate must be eligible for IT Level II (IAT-II) certification under DoD 8570 requirements. (Ex: Security+ or equivalent)
• Proven experience in system engineering and SDLC methodologies
• Expert-level proficiency in MECM hierarchy design, including CAS, Primary, and Secondary sites, as well as Intune co-management configurations of endpoints in a hybrid environment
• Expert-level proficiency in Windows Server (2016/2019/2022) administration and automation using PowerShell
• Strong understanding of Active Directory, DNS, PKI, and Group Policy integration within MECM environments
• Advanced SQL Server management and T-SQL query optimization skills specific to MECM databases
• Experience with Microsoft Azure infrastructure and MECM cloud integration components
• Knowledge of networking principles (TCP/IP, firewall, proxy configuration) and MECM communication ports
• Experience in applying DoD STIGs, cybersecurity controls, and compliance reporting for MECM infrastructure
• Strong communication, documentation, and leadership skills in enterprise operational environments
• Strong ability to create detailed documentation and design artifacts, including system architecture diagrams, technical specifications, and process flows
• Excellent communication skills to articulate complex technical concepts to both technical and non-technical stakeholders
• Experience with various documentation tools and practices
• Knowledge of agile and traditional SDLC methodologies
• Experience working in DoD, federal, or large enterprise environments with complex compliance requirements
• Familiarity with Microsoft Defender for Endpoint (MDE), Zero Trust frameworks, and compliance auditing integrations
• Microsoft Certified: Configuration Manager Administrator Associate or Endpoint Administrator Expert
• Microsoft Certified: Azure Administrator Associate or Solutions Architect Expert