SCCM Platform Owner

Nordea; Warszawa; Hybrid; PLN 300,000 - 520,000; Full time

Benefits offered by this job

Hybrid work model

Career growth

Diversity & inclusion

Job summary

Nordea is seeking a Windows SCCM Platform Owner to own the end-to-end MECM/SCCM footprint across on-premises infrastructure. You will define the multi-year strategy, upgrade paths, and governance to ensure security, reliability, and scalable deployment across thousands of endpoints.

You will lead enterprise patching, OS deployment lifecycles, and integration with co-management strategies using Intune and Azure AD, while engaging with vendors and internal stakeholders.

Qualifications

• Deep knowledge of SCCM/MECM internals, SQL, SSRS, log analysis, and client-site issues.
• Experience integrating SCCM with Intune/Azure AD for co-management.
• Automation using PowerShell to manage SCCM tasks and configurations.
• Understanding of PKI, AD, GPOs, DNS/DHCP for enterprise deployment.
• Ability to justify investments and manage TCO for endpoint management.
• Experience with DR/BC planning for SCCM infrastructure.

Responsibilities

• Define multi-year SCCM roadmap and upgrade plans.
• Govern global SCCM architecture (Primary Sites, CAS, MP, DP).
• Oversee patching using WSUS/SUP and ADRs.
• Lead OS Deployment governance and zero/low-touch provisioning.
• Interface with vendors and Microsoft engineering support.
• Translate telemetry into executive dashboards for leadership.

Skills

SCCM/MECM

Co-Management & Modern Workplace

Automation & Scripting

Infrastructure & Network Integration

Platform Ownership & TCO

Disaster Recovery & Continuity

Tools

WSUS

Intune

Azure AD

CMG

Job description

Select how often (in days) to receive an alert: Create Alert

Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea's transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.

We are seeking a Windows SCCM Platform Owner to take end-to-end accountability for our core on-premise enterprise Microsoft Endpoint Configuration Manager (MECM/SCCM) ecosystem. In this role, you will define the roadmap, technical standards, and lifecycle management for our SCCM system footprint across physical bare-metal servers, virtualization layers, and private cloud architectures. You will balance hands-on architectural governance with strategic planning to ensure maximum reliability, security, and scalability for our infrastructure.

Nordea is a place where traditions meet tomorrow. We're not just a bank, we're a tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people's daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.

About our team

Our Core Engineering Team is the backbone of Nordea global technology ecosystem. We are a high-impact group of engineers dedicated to designing, automating, and maintaining the enterprise-scale Windows and Unix infrastructure that powers our entire organization.

We don't just maintain servers; we treat infrastructure as code. Our mission is to build highly secure, resilient, and self-healing platforms across thousands of physical, virtual, and cloud environments. We are a collaborative, forward-thinking team that bridges the gap between traditional infrastructure and modern cloud architecture.

What you'll be doing

Main responsibilities in this role:

• Platform Strategy & Roadmap Ownership: Define, publish, and execute the multi-year technical roadmap for the enterprise Microsoft Endpoint Configuration Manager (MECM/SCCM) hierarchy. Manage infrastructure version upgrades, site system expansions, and cloud-management gateway (CMG) integration strategies to prevent technical debt.


• Global Architecture & Configuration Governance: Design, maintain, and govern the global SCCM site architecture, including Primary Sites, Central Administration Sites (CAS), Management Points, and Distribution Points. Establish standardized client settings, boundary groups, and content delivery strategies to optimize network bandwidth across thousands of endpoints.


• Enterprise Patch & Vulnerability Orchestration: Own the end-to-end design and execution of the automated enterprise patching framework (WSUS/SUP integration). Oversee Software Update Groups and Automatic Deployment Rules (ADRs) to remediate critical security vulnerabilities within strict corporate SLAs without impacting business productivity.


• Application Delivery & Image Deployment Lifecycle: Lead the governance and architecture for enterprise OS Deployment (OSD) task sequences, driver management, and global application packaging standards. Champion \"Zero- Touch\" or \"Light-Touch\" provisioning frameworks to streamline hardware refresh cycles across the global footprint.


• Vendor & Software Asset Management: Act as the technical interface for Microsoft engineering support and hardware vendors. Leverage SCCM asset intelligence and software metering data to provide clear reports on hardware compliance, software usage, and license utilization to optimize enterprise software spend.


• Stakeholder Communication & Backlog Management: Translate platform telemetry and compliance percentages into executive-level dashboards for InfoSec and leadership teams. Prioritize the platform backlog, balancing critical infrastructure health upgrades with the deployment requests of various business units.

Who you are

Desirable experience and skills (you don't have to have them all, to be a good candidate):

• Enterprise SCCM/MECM Expertise: Deep knowledge of SCCM internals, including WMI, site database schemas, SQL Server reporting services (SSRS), log analysis (cmtrace), and troubleshooting complex client-to-site communication failures.


• Co-Management & Modern Workplace Evolution: Solid experience integrating traditional SCCM architectures with Microsoft Intune and Azure AD/Entra ID to execute a seamless tenant attach and co-management strategy for modern endpoint management.


• Advanced Automation & Scripting: Highly proficient in utilizing PowerShell to automate bulk SCCM tasks, modify task sequences, build custom scripts for application deployment, and enforce configurations via PowerShell DSC or Configuration Baselines.


• Infrastructure & Network Integration: Robust understanding of how SCCM interacts with underlying enterprise infrastructure, including Active Directory, Group Policies (GPOs), DNS, DHCP, PXE booting, and network delivery optimization protocols (Peer Cache, Delivery Optimization).


• Product Ownership & TCO Mindset: Ability to treat the deployment platform as an internal scalable product. Proven track record in analyzing and optimizing the Total Cost of Ownership (TCO) for endpoint management tools, evaluating infrastructure hosting costs (on-prem vs. Azure CMG), and justifying investments to business stakeholders.


• Lifecycle & Continuity Management: Experience architecting disaster recovery, high-availability, and backup procedures for critical SCCM infrastructure to ensure continuous deployment capabilities during site or network failures.

It would be ideal if you also were:

• Proficient in English, spoken and written C1+.


• Experienced working for a financial institution.

What we offer

Collaboration. Ownership. Passion. Courage. These are the values that guide us in how we work and how we make decisions – and that we imagine you share with us.

People are driven by many different factors. For some, it’s to take their career to the next level. For others, it’s to break new ground within their area of expertise – in other words, with us, you will always move forward.

A culture that fosters performance and growth in one of the largest Nordic banks, offering various opportunities to evolve, develop and learn from brilliant colleagues with diverse backgrounds in a vibrant working environment.

Hybrid working model - we believe in the value of bringing people together and at the same time we embrace the freedom of flexibility.

Diversity and inclusion are a natural part of our daily work. We know that an inclusive workplace is a sustainable one. We genuinely believe that our diverse backgrounds, experiences, characteristics and traits make us stronger together. Every day we strive to find new ways to improve diversity and inclusion within our community e.g. we have signed the European Diversity Charters in the countries where we operate to show our commitment and engage with others to continue learning and improving.

We enable dreams and aspirations for a greater good.

We build