MECM Engineer

The Amatriot Group; Key West (FL); On-site; USD 170,000 - 210,000; Full time

Job summary

Amatriot is seeking an experienced Microsoft Endpoint Configuration Manager Administrator to join our on-site team in Key West, FL. The role focuses on MECM/SCCM administration, OS imaging, patch management, and security compliance.

The ideal candidate has 5+ years of MECM/SCCM experience, strong PowerShell skills, and familiarity with Active Directory, GPO, DNS, and enterprise networking. This position is on-site 5 days a week and involves collaboration with cybersecurity teams to meet DoD STIG

Qualifications

• Bachelor’s degree or higher; degree can be substituted by experience.
• 5+ years of MECM/SCCM in a Systems Admin/Engineer role.
• Strong Windows OS deployment, patching and packaging knowledge.
• Solid PowerShell scripting for automation and reporting.
• Familiarity with AD, GPO, DNS and enterprise networking concepts.

Responsibilities

• Administer MECM/SCCM to manage deployments, imaging, updates and patch compliance across the enterprise.
• Develop and maintain task sequences, collections and deployment packages for software and OS rollouts.
• Monitor performance and troubleshoot MECM-related issues; ensure timely resolution.

Skills

MECM/SCCM expertise

PowerShell scripting

Windows OS deployment

Patch management

Active Directory

Group Policy

DNS

Enterprise networking

Education

Bachelor’s degree or higher

Tools

MECM/SCCM

Intune

Autopilot

DISA STIG tooling

Job description

Location: Key West, FL
Security Clearance: Top Secret (minimum)

Job Type: Full-Time

Target Salary Range*:$170,000 - $210,000

*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview:

Amatriot seeks an experienced Microsoft Endpoint Configuration Manager Administrator to join our team in Key West, FL. This position is on-site 5 days a week.

Key Responsibilities:

• Administer MECM to manage software deployments, OS imaging, updates, and patch compliance across the enterprise
• Develop and maintain task sequences, collections, and deployment packages for software and operating system rollouts
• Monitor system performance and troubleshoot MECM-related issues, ensuring timely resolution
• Manage and report on patch compliance, providing remediation plans for systems that fall out of compliance
• Maintain configuration baselines and enforce endpoint security policies
• Collaborate with cybersecurity teams to ensure all updates meet compliance standards and DoD STIG requirements
• Generate detailed reports on asset inventory, deployment status, and compliance metrics
• Document SOPs and provide knowledge transfer to junior administrators and helpdesk staff

Qualifications:

• Bachelor’s degree in relevant field. A degree can be substituted for additional experience.
  • High School Diploma and 4 years of additional experience may be exchanged in lieu of a required bachelor’s degree
  • Associate’s degree and 2 years of additional experience may be exchanged in lieu of a required bachelor’s degree
  • A master’s degree is equivalent to an additional 2 years of experience and a PhD is equivalent to an additional 4 years of experience
• Five (5) or more years of experience managing MECM/SCCM environments as a Systems Administrator or Systems Engineer
• Expertise in Windows OS deployment, patch management, and application packaging. Strong PowerShell scripting skills for automation and reporting
• Familiarity with Active Directory, Group Policy, DNS, and enterprise networking concepts

Preferred Qualifications:

• Microsoft Certified: Endpoint Administrator Associate or similar certification
• Experience managing MECM at a DoD Combatant Command (e.g., SOUTHCOM, NORTHCOM, CENTCOM, CYBERCOM, INDOPACOM, EUCOM, AFRICOM, STRATCOM, TRANSCOM, SOCOM, SPACECOM) or a component is desired.
• Knowledge of Intune, Autopilot, and hybrid device management strategies
• Experience with vulnerability remediation and DISA STIG compliance processes