Microsoft Endpoint Configuration Manager (MECM/SCCM)

Optum, a UnitedHealth Group Company; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Optum is seeking an I O Engineering Consultant in the Philippines to deliver device management across MECM/SCCM, Intune and Workspace ONE UEM within a Dual UEM environment. You will own endpoint engineering from packaging to deployment, OS servicing, patching, and remediation while ensuring security and compliance.

The role emphasizes health monitoring, major incident participation, and automation/AI ideation to improve reliability, speed, and user experience.

Qualifications

• Undergraduate degree or equivalent experience.
• Omnissa Workspace ONE UEM: 1+ years of administrative depth (profiles, Smart Groups, app distribution, compliance policies, device troubleshooting).
• Core Technical Skills include MECM/SCCM, Microsoft Intune, and Dual UEM operations.
• Operations, Health & Availability: health monitoring and remediation.
• Patching & Vulnerability Operations: MECM ADRs, maintenance windows, compliance reporting.
• Automation & Scripting: PowerShell scripting for automation and remediation; runbooks.
• ITSM & Operational Excellence: SLA adherence, MTTR reduction, AI adoption.

Responsibilities

• Administer MECM components (collections, boundaries, deployments, content distribution, client health monitoring, reporting).
• Administer Intune (enrollment, configuration profiles, compliance policies, app assignments, RBAC) and support coexistence with MECM.
• Administer Workspace ONE UEM (profiles, Smart Groups, compliance, app deployments) and support coexistence with Intune (Dual UEM).
• Monitor platform health and availability: enrollment success, policy/app success rates, client health, content distribution health, and remediation backlogs.
• Maintain device inventory accuracy and operational hygiene; perform routine health checks and standard validations.
• Package and deploy applications (MSI/EXE/MSIX/Win32) with detection methods, dependencies, supersedence, and phased ring deployments.
• Support OS deployment and servicing (Task Sequences, feature updates, in-place upgrades), driver/BIOS packaging coordination, and rollback plans.
• Execute post-deployment validation and remediation for failed installs, policy conflicts, and provisioning issues.
• Operate software update/patching via MECM (ADRs, maintenance windows, deployment schedules, compliance reporting) and coordinate exception handling.
• Support vulnerability remediation initiatives by deploying security patches and approved mitigations within defined timelines.
• Track compliance posture and drive remediation for non-compliant endpoints; support dashboards and reporting.
• Troubleshooting, ITSM & War Rooms: Troubleshoot endpoint deployment and client issues using logs and diagnostics.
• Work within ITSM processes (Incident/Problem/Change) including change documentation, risk assessment, and post-change validation.
• Participate in major incident war rooms/bridges; provide technical inputs, implement mitigations, and document restoration actions.
• Track and drive SLA adherence; contribute to MTTR reduction via faster triage, known error documentation, and repeat-incident prevention.
• Automation & AI Adoption / Ideation: Create PowerShell automations and pilot AI ideas with measurable success.
• Pilot small-scale AI/automation ideations with measurable success criteria and ensure security and privacy compliance.

Education

Undergraduate degree or equivalent experience

Tools

Omnissa Workspace ONE UEM

MECM/SCCM

Microsoft Intune

Dual UEM

PowerShell

ADR (MECM)

Job description

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

As an I O Engineering Consultant, you will deliver reliable and secure device management services in a Dual UEM environment using Microsoft Endpoint Configuration Manager (MECM/SCCM), Microsoft Intune, and Omnissa Workspace ONE UEM. You will own day-to-day endpoint engineering and operational outcomes across application lifecycle (packaging to deployment), OS servicing, patch compliance, vulnerability remediation, and endpoint configuration. The role is execution-focused with solid troubleshooting depth and disciplined ITSM practices. You will routinely participate in major incident bridges/war rooms, ensuring service restoration within agreed SLAs and contributing to measurable MTTR reduction. You will also contribute to AI adoption by proposing and piloting practical ideations (e.g., ticket triage assist, automated log parsing, runbook generation) to improve reliability, speed, and user experience, while adhering to organizational security, privacy, and data handling standards.

Primary Responsibilities:

• Platform Operations, Health & Availability
• Administer MECM components (collections, boundaries, deployments, content distribution, client health monitoring, reporting)
• Administer Intune (enrollment, configuration profiles, compliance policies, app assignments, RBAC) and support coexistence with MECM
• Administer Workspace ONE UEM (profiles, Smart Groups, compliance, app deployments) and support coexistence with Intune (Dual UEM)
• Monitor platform health and availability: enrollment success, policy/app success rates, client health, content distribution health, and remediation backlogs
• Maintain device inventory accuracy and operational hygiene; perform routine health checks and standard validations
• Application Lifecycle, OS Servicing & Operations
• Package and deploy applications (MSI/EXE/MSIX/Win32) with detection methods, dependencies, supersedence, and phased ring deployments
• Support OS deployment and servicing (Task Sequences, feature updates, in-place upgrades), driver/BIOS packaging coordination, and rollback plans
• Execute post-deployment validation and remediation for failed installs, policy conflicts, and provisioning issues
• Patching, Vulnerability Remediation & Compliance
• Operate software update/patching via MECM (ADRs, maintenance windows, deployment schedules, compliance reporting) and coordinate exception handling
• Support vulnerability remediation initiatives by deploying security patches and approved mitigations within defined timelines
• Track compliance posture and drive remediation for non-compliant endpoints; support dashboards and reporting
• Troubleshooting, ITSM & War Rooms
• Troubleshoot endpoint deployment and client issues using logs and diagnostics (e.g., AppEnforce/AppDiscovery, WUAHandler, CAS, CCMExec)
• Work within ITSM processes (Incident/Problem/Change) including change documentation, risk assessment, and post-change validation
• Participate in major incident war rooms/bridges; provide technical inputs, implement mitigations, and document restoration actions
• Track and drive SLA adherence; contribute to MTTR reduction via faster triage, known error documentation, and repeat-incident prevention
• Automation & AI Adoption / Ideation
• Create and maintain PowerShell-based operational automations (health checks, compliance reporting, remediation scripts)
• Propose AI-assisted improvements (e.g., Copilot-assisted draft runbooks, KB articles, ticket summarization, and log pattern identification)
• Pilot small-scale AI/automation ideations with measurable success criteria (time saved, reduced rework, improved compliance)

• Ensure AI usage adheres to organizational security, privacy, and data handling policies (no sensitive data leakage)

• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

Required Qualifications:

• Undergraduate degree or equivalent experience
• Omnissa Workspace ONE UEM: 1+ years of administrative depth (profiles, Smart Groups, app distribution, compliance policies, device troubleshooting)
• Core Technical Skills (Primary)
  • MECM/SCCM: Proven application model, collections, deployments, boundaries, content distribution, client health, reporting
  • Microsoft Intune: Proven enrollment methods, configuration/compliance policies, Win32 app deployment, troubleshooting, RBAC
  • Dual UEM operations: Proven to support coexistence, minimize policy conflicts, and ensure consistent end-user experience
• Operations, Health & Availability
  • Health monitoring and remediation: Proven client health, enrollment success, policy/app deployment success, content distribution health
  • Service reliability ownership: Proven stability, availability, and operational hygiene
• Patching & Vulnerability Operations
  • MECM patching operations: Proven ADRs, deployment rings, maintenance windows, compliance reporting
  • Vulnerability remediation support: Proven to execute remediation plans and validate compliance within required timelines
• Automation & Scripting
  • Experience working in war rooms and providing concise technical updates for rapid restoration
  • Working knowledge of Incident/Problem/Change management; ability to write clear change plans and validation steps
  • PowerShell scripting for automation and remediation; familiarity with scheduled tasks and basic safe rollout practices
  • Proven ability to create repeatable runbooks and operational checklists
• ITSM & Operational Excellence
  • Proven ownership mindset for SLA adherence and MTTR reduction
  • AI Adoption & Continuous Improvement
  • Proven comfort using approved AI tools to accelerate documentation, analysis, and knowledge management
  • Proven ability to identify repetitive tasks suitable for automation or AI assistance and propose improvements

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.

Optum is a drug-free workplace. © 2026 Optum Global Solutions (Philippines) Inc. All rights reserved.