Role Overview
Lead the administration, optimization, and governance of Microsoft Endpoint Configuration Manager across a large-scale, highly regulated enterprise environment. The role focuses on endpoint compliance, operating system lifecycle management, software deployment, patching, platform health, and secure service delivery.
You will own and enhance the MECM/SCCMservice while partnering with infrastructure, security, workplace, server,application, and service-management teams. You will provide senior-leveltechnical leadership, resolve complex platform issues, and ensure endpoint services remain reliable, secure, compliant, and audit-ready.
Key Responsibilities
- Administer, maintain, and optimize enterprise Microsoft Endpoint Configuration Manager (MECM/SCCM) infrastructure.
- Design and support operatingsystem deployment solutions for Windows client and server platforms, including task sequences, boot images, driver packages, and OS images.
- Plan and execute monthly security patching, software update deployments, and vulnerability-remediationactivities.
- Package, test, deploy, and troubleshoot enterprise applications using MECM and approved packaging frameworks.
- Monitor site health and availability across Management Points, Distribution Points, Software Update Points, boundaries, boundary groups, and client communications.
- Provide L3 troubleshooting forclient health, content distribution, policy processing, patching, software deployment, and task-sequence failures.
- Produce endpoint inventory, compliance, operational-health, and audit reports for technical and governance stakeholders.
- Integrate MECM with MicrosoftIntune and support co-management or modern endpoint-management initiatives where applicable.
- Partner with security teams onendpoint security baselines and vulnerability-remediation activities using platforms such as Qualys and Microsoft Defender.
- Develop and maintain PowerShellautomation for administration, health checks, remediation, reporting, and operational efficiency.
- Support endpoint lifecycle activities including provisioning, refresh, software distribution, configuration changes, and decommissioning.
- Coordinate incidents, problems, changes, and service requests through ServiceNow and contribute to root-causeanalysis and continual service improvement.
- Maintain technicaldocumentation, operating procedures, support models, platform standards, and recovery plans.
- Provide technical guidance to administrators and coordinate delivery across geographically distributed teams.
What you bring
You bring deep hands-on experience supporting enterprise endpoint-management platforms in environments where security, resilience, governance, and operational discipline are essential. You combine advanced MECM/SCCM expertise with strong troubleshooting, automation, documentation, and stakeholder-management capabilities.
Required skills & Experience
- Extensive experience administering Microsoft Endpoint Configuration Manager (MECM/SCCM) in a large Enterprise environment.
- Expert-level knowledge of MECM/SCCM architecture, client management, software distribution, operatingsystem deployment, software updates, collections, reporting, and compliance.
- Advanced troubleshootingexperience across site systems, client health, content distribution, boundarygroups, Management Points, Distribution Points, Software Update Points, andtask sequences.
- Strong PowerShell scripting skills for automation, reporting, diagnostics, and remediation.
- Experience with MicrosoftIntune, co-management, Microsoft Defender, Active Directory, Group Policy,WSUS, PKI certificates, DNS, and network fundamentals.
- Experience with application packaging and deployment technologies such as MSI and PowerShell App DeploymentToolkit (PSADT), or equivalent frameworks.
- Working knowledge of Windows Server infrastructure supporting MECM site systems.
- Knowledge of endpoint securitycontrols, vulnerability management, technical security standards, and audit evidence requirements.
- Experience with enterpriseplatforms such as ServiceNow and Qualys.
- Strong analytical,problem-solving, documentation, communication, and stakeholder-managementskills.
- Ability to work independently,prioritize competing demands, and maintain high quality under minimalsupervision.
- Experience in banking, financial services, or another highly regulated technology environment is strongly preferred.
Preferred qualifications
- Microsoft certification aligned to endpoint administration, Intune, Windows, or Microsoft 365.
- ITIL Foundation or equivalent service-management certification.
- Experience with hybrid endpoint environments, modern management, automation, and large-scale Technology Transformation.
- Experience supporting globally distributed endpoint estates and cross-regional operations teams.