MECM Engineer

Zachary Piper Solutions; Norfolk (VA); Hybrid; USD 95,000 - 100,000; Full time

Job summary

Zachary Piper Solutions is seeking a MECM Engineer to support a long-term DoD program focused on Navy enterprise endpoint management, MECM/SCCM, Windows infrastructure, automation, and site reliability engineering. This position is 100% onsite in Norfolk, VA or Pearl Harbor, HI.

The MECM Engineer will provide hands-on expertise across a large-scale Windows environment, including OS deployments, patching, and endpoint management.

Qualifications

• Hands-on MECM/SCCM engineering at enterprise scale.
• Experience with OS deployment, patching, and compliance.
• Automation using PowerShell, APIs, Python, and IaC.
• Knowledge of CI/CD and DevOps practices.
• Clearance and DoD environment experience preferred.

Responsibilities

• Engineer, deploy, maintain MECM environments at enterprise scale.
• Design device collections, deployments, OS images, workflows.
• Support OS deployments, upgrades, patching, configuration management.
• Develop automated MECM workflows using scripts and IaC.
• Improve performance, reliability, and high availability.

Skills

MECM/SCCM

PowerShell

Python

IaC

CI/CD

DevOps

SRE

Windows OS deployment

Patching

Automation

Education

Bachelor's degree

Tools

Jenkins

GitLab

Azure DevOps

Terraform

Ansible

CloudFormation

Chef

Puppet

SQL Server

Job description

Zachary Piper Solutions is seeking a MECM Engineer to support a long-term DOD program focused on Navy enterprise endpoint management, Microsoft Endpoint Configuration Manager (MECM/SCCM), Windows infrastructure, automation, and site reliability engineering. This position is 100% onsite in Norfolk, VA or Pearl Harbor, HI. The MECM Engineer will support a large-scale enterprise Windows environment, providing hands‑on expertise in MECM/SCCM engineering, operating system deployments, patching, endpoint compliance, automation, monitoring, performance testing, and infrastructure reliability across mission‑critical Navy systems.

Responsibilities of the MECM Engineer include:

• Engineer, deploy, maintain, and troubleshoot Microsoft Endpoint Configuration Manager (MECM/SCCM) environments at enterprise scale
• Design and manage MECM device collections, applications, packages, task sequences, operating system deployment images, and deployment workflows
• Support enterprise-wide Windows operating system deployments, upgrades, patching, and endpoint configuration management
• Develop and maintain automated MECM workflows using PowerShell, APIs, Python, Ansible, and Infrastructure as Code (IaC) technologies
• Optimize MECM infrastructure for performance, reliability, scalability, and high availability
• Troubleshoot complex MECM client and server issues using logs, diagnostics, monitoring, and platform health data
• Manage Windows endpoint patching strategies, compliance baselines, configuration items, reporting, and proactive remediation
• Support integration between MECM and cloud‑based Microsoft technologies including Intune, Azure AD/Entra ID, and Windows Update for Business
• Support MECM infrastructure components including Distribution Points, Boundary Groups, and PXE services, with an understanding of the underlying networking requirements
• Monitor enterprise systems and endpoint environments using Splunk and other observability and dashboarding tools
• Identify performance bottlenecks and develop solutions to improve infrastructure and application reliability
• Design and execute automated performance, load, stress, and failure testing to validate system reliability under real‑world conditions
• Develop automated test suites and integrate reliability testing into CI/CD pipelines
• Validate system monitoring, logging, alerting, and recovery capabilities by simulating network disruptions, hardware failures, system overloads, and other failure scenarios
• Define and monitor Service Level Indicators (SLIs), Service Level Objectives (SLOs), and Mean Time to Recovery (MTTR) to improve overall system reliability
• Support CI/CD and DevOps environments using tools such as Jenkins, GitLab, Bitbucket, and Azure DevOps
• Develop and maintain infrastructure automation using Terraform, Ansible, CloudFormation, Chef, Puppet, or similar technologies
• Support cloud infrastructure environments including AWS and Azure
• Maintain technical documentation, configuration standards, automation workflows, and operational procedures
• Apply RMF, DISA STIG, and DoD cybersecurity requirements to enterprise endpoint and infrastructure environments
• Collaborate with SREs, developers, systems engineers, cybersecurity teams, and operations personnel to improve reliability, automation, and deployment processes
• Support Agile/DevSecOps processes, JIRA, Confluence, Bitbucket, and Azure DevOps workflows
• Support classified environments and provide local travel to access SIPRNet from NMCI locations when required

Qualifications of the MECM Engineer include:

• 5–10 years of relevant experience with a Bachelor’s degree, or 4–8 years with a Master’s degree; equivalent experience may be considered
• 7+ years of overall relevant professional experience
• Active Secret clearance
• IAT Level II certification
• Extensive hands‑on experience designing, deploying, maintaining, and troubleshooting MECM/SCCM environments
• Strong experience with MECM device collections, task sequences, applications, packages, OS deployment images, and enterprise deployments
• Strong Windows endpoint management experience including patching, compliance baselines, configuration items, reporting, and remediation
• Hands‑on experience automating MECM and Windows administration using PowerShell, Python, APIs, or similar scripting technologies
• Experience supporting enterprise‑scale Windows operating system deployments and in‑place upgrades
• Experience troubleshooting MECM infrastructure, clients, servers, deployments, and distribution components
• Understanding of Distribution Points, Boundary Groups, PXE, and networking requirements supporting MECM
• Experience with SQL Server administration or database troubleshooting in support of MECM environments
• Understanding of SRE, DevOps, CI/CD, Infrastructure as Code, and reliability engineering concepts
• Experience with automated provisioning and configuration tools such as Ansible, Terraform, CloudFormation, Chef, or Puppet
• Experience with CI/CD tools such as Jenkins, GitLab, or Azure DevOps
• Experience with cloud infrastructure environments such as AWS or Azure
• Experience with monitoring and observability tools such as Splunk
• Working knowledge of RMF, DISA STIGs, and DoD cybersecurity requirements
• Experience working in classified DoD environments
• Strong troubleshooting, automation, documentation, and problem‑solving skills
• Ability to work collaboratively with development, engineering, operations, cybersecurity, and SRE teams

Preferred Qualifications of the MECM Engineer

• Advanced experience with Infrastructure as Code, including Terraform, Ansible, or CloudFormation
• Experience integrating MECM with Intune, Azure AD/Entra ID, or Windows Update for Business
• Experience with automated performance, load, stress, and failure testing
• Experience with SLIs, SLOs, MTTR, and other SRE reliability metrics
• Experience with JIRA, Confluence, Bitbucket, and Azure DevOps administration
• ITILv4, Scrum Master, or Agile SAFe certification or equivalent experience
• Strong Python/Bash scripting experience
• Experience administering SRE/DevOps platforms, including Jenkins
• Experience with configuration drift reduction and automated remediation

Compensation for the MECM Engineer includes:

• Salary: $95,000-$100,000 depending on experience
• Benefits: Medical, Dental, Vision, 401k Plan, Holidays, PTO, sick leave as required by law

Keywords:

MECM Engineer, SCCM Engineer, MECM/SCCM Engineer, Microsoft Endpoint Configuration Manager, Microsoft Endpoint Configuration Manager Engineer, SCCM, System Center Configuration Manager, Site Reliability Engineer, SRE, Systems Engineer, Systems Administrator, Endpoint Engineer, Endpoint Management Engineer, Windows Engineer, Windows Systems Engineer, Windows Infrastructure Engineer, Endpoint Infrastructure, Enterprise Endpoint Management, Windows Endpoint Management, Windows Administration, Enterprise Windows, Windows Server, Windows Deployment, Operating System Deployment, OSD, Task Sequences, Device Collections, Applications, Packages, MECM Collections, MECM Applications, MECM Packages, MECM Task Sequences, SCCM Collections, SCCM Applications, SCCM Packages, SCCM Task Sequences, PXE, Distribution Point, DP, Boundary Groups, MECM Infrastructure, SCCM Infrastructure, MECM Client, SCCM Client, MECM Troubleshooting, SCCM Troubleshooting, MECM Automation, SCCM Automation, Windows Patching, Patch Management, Endpoint Patching, Compliance Baselines, Configuration Items, Endpoint Compliance, Vulnerability Remediation, Windows Updates, OS Deployment, In-Place Upgrade, PowerShell, Python, Bash, API, REST API, Automation, Infrastructure as Code, IaC, Ansible, Terraform, CloudFormation, Chef, Puppet, DevOps, DevSecOps, Site Reliability Engineering, SRE, CI/CD, Continuous Integration, Continuous Deployment, Jenkins, GitLab, Azure DevOps, Bitbucket, Git, GitHub, Splunk, Monitoring, Observability, Performance Monitoring, Performance Testing, Load Testing, Stress Testing, Failure Testing, Reliability Testing, Automated Testing, Test Automation, SLI, SLO, MTTR, High Availability, Performance Optimization, SQL Server, MECM Database, SCCM Database, Intune, Azure AD, Entra ID, Windows Update for Business, Azure, AWS, Cloud Infrastructure, RMF, Risk Management Framework, DISA STIG, STIG, DoD, DOD, Department of Defense, Navy, US Navy, Navy Infrastructure, NMCI, NGEN-NMCI, Navy Marine Corps Intranet, Federal IT, Secret Clearance, Active Secret, IAT II, Security+, Norfolk, Virginia, VA, Norfolk Naval Station, Pearl Harbor, Hawaii, HI, Honolulu, Oahu

#LI-SW1

#LI-ONSITE