Endpoint Provisioning Lead – Intune & MECM

TEK Systems; Washington (District of Columbia); On-site; USD 34,000 - 48,000; Full time

Benefits offered by this job

Medical, dental & vision

Critical Illness, Accident, and Hosp

401(k) Retirement Plan Pre-tax and R 1

Life Insurance (Voluntary Life & AD&D)

Short and long-term disability

Health Spending Account (HSA)

Transportation benefits

Employee Assistance Program

Time Off/Leave (PTO, Vacation or Sick)

Job summary

TEKsystems is seeking an EDM Engineer to support endpoint provisioning and device management for a 2027 laptop refresh project in Washington, DC. The role focuses on building provisioning workflows, enforcing security baselines, and coordinating with cross-functional teams.

The ideal candidate has expert-level experience with Intune, SCCM/MECM, Azure AD/Entra ID, and PowerShell automation, ensuring devices meet security standards and deployment goals.

Qualifications

• Handson experience with Microsoft Intune, SCCM, Windows configuration baselines, and modern provisioning.
• Familiarity with MECM/SCCM, Azure AD/Entra ID, Conditional Access, and Windows 11 security features.
• Strong PowerShell and automation skills for endpoint configuration and reporting.
• Ability to interpret and troubleshoot device enrollment, compliance, and application deployment issues.
• Understanding of enterprise laptop lifecycle processes and endpoint security controls.
• Excellent communication, documentation skills, and cross-team collaboration ability.

Responsibilities

• Build, maintain, and optimize Windows laptop provisioning workflows using Intune, Autopilot, and related endpoint management tools.
• Develop and manage configuration baselines, security policies, and application deployment packages.
• Coordinate closely with project management, logistics, asset teams, and technical teams to ensure successful device deployment and policy alignment.
• Monitor deployment progress using Intune, MECM, ServiceNow, and Excel; generate project dashboards and status reports.
• Validate device enrollment, configuration, and compliance data; troubleshoot and resolve discrepancies promptly.
• Ensure all devices meet organizational security standards, including encryption, compliance policies, and endpoint protection requirements.
• Support pilot testing, production rollout, and postdeployment stabilization activities.
• Maintain documentation, provisioning guides, and support materials for crossfunctional teams.

Skills

Intune experience

SCCM/MECM

PowerShell automation

Enrollment troubleshooting

Endpoint security

Cross-team collaboration

Tools

MECM/SCCM

Azure AD/Entra ID

Conditional Access

Windows 11 security features

Job description

TEKsystems is seeking an EDM Engineer to support endpoint provisioning and device management for a 2027 laptop refresh project in Washington, DC. The role focuses on building provisioning workflows, enforcing security baselines, and coordinating with cross-functional teams.

The ideal candidate has expert-level experience with Intune, SCCM/MECM, Azure AD/Entra ID, and PowerShell automation, ensuring devices meet security standards and deployment goals.