Microsoft Configuration Management Engineer (SCCM/MECM and Intune)

Akima; Alexandria (VA); Hybrid; USD 145,000 - 150,000; Full time

Benefits offered by this job

Comprehensive benefits package

Job summary

Suvi, an Akima company, is seeking a Microsoft Configuration Management Engineer to engineer, deploy, and optimize enterprise endpoint management across on‑premises, hybrid, and cloud environments. You will work with architects, cybersecurity, and service desks to sustain services and transition capabilities to Intune and Azure-based solutions.

The role emphasizes deploying OS images, software updates, and compliance baselines, while developing automation and documentation for operational

Qualifications

• Bachelor’s degree required or equivalent experience; significant endpoint-management experience may substitute.
• Five years of enterprise Windows endpoint-management experience with SCCM/MECM and Intune.
• Active Top Secret security clearance required.

Responsibilities

• Administer and support SCCM/MECM and Intune, including deployment, software updates, device collections, configuration profiles, compliance policies, and reporting.
• Package, test, deploy, maintain, and troubleshoot Windows applications across SCCM/MECM- and Intune-managed endpoints.
• Plan and execute enterprise patching and update-management activities (update rings, deployment rules, maintenance windows, compliance reporting).
• Support Windows OS deployment and provisioning (task sequences, PXE, Autopilot, imaging, driver management).
• Develop and maintain device collections, configuration items, and compliance baselines to identify drift and automate remediation.
• Troubleshoot endpoint-management issues using logs, PowerShell, and related tools.
• Coordinate with cybersecurity teams to validate findings, identify affected endpoints, and track remediation through closure.
• Develop PowerShell scripts and use Graph APIs to improve endpoint administration, reporting, and automation.
• Support migration to cloud-based endpoint management while following change and release processes.

Skills

Security clearance

Endpoint-management experience

Education

Bachelor’s degree (IT / CS / Cybersecurity / information systems)

IAT Level II Certification

Microsoft 365 Certified: Endpoint Administrator Associate

Microsoft Certified: Identity and Access Administrator Associate

Job description

The Microsoft Configuration Management Engineer is responsible for engineering, administering, maintaining, and improving enterprise endpoint management services using Microsoft Configuration Manager (SCCM/MECM) and Microsoft Intune. The engineer supports the full lifecycle of Windows endpoint management, including application packaging and deployment, operating system deployment, software patching, configuration management, compliance monitoring, vulnerability remediation, and endpoint troubleshooting across on-premises, hybrid, and cloud-managed environments.

This position maintains and optimizes Configuration Manager and Intune capabilities, including device collections, task sequences, configuration items and baselines, software update deployments, application packages, compliance policies, configuration profiles, security baselines, and Windows update policies. The engineer works closely with enterprise architects, cloud engineers, cybersecurity teams, service desk personnel, and system owners to sustain existing services and support the transition of appropriate endpoint-management capabilities to Microsoft Intune and Azure-based services.

The engineer plans, schedules, executes, monitors, and validates endpoint deployments and remediation activities using enterprise reporting, endpoint telemetry, client diagnostics, and management tools. The position also supports endpoint-management infrastructure and develops the technical documentation necessary to ensure operational continuity, configuration control, auditability, security compliance, and effective lifecycle management.

Responsibilities

• Administer and support Microsoft Configuration Manager (SCCM/MECM) and Microsoft Intune, including application deployment, software updates, device collections, configuration profiles, compliance policies, security baselines, reporting, and client troubleshooting.

• Package, test, deploy, maintain, and troubleshoot Windows applications across SCCM/MECM- and Intune-managed endpoints.

• Plan and execute enterprise patching and update-management activities, including software update groups, automatic deployment rules, maintenance windows, phased deployments, update rings, feature updates, quality updates, and compliance reporting.

• Support Windows operating system deployment and provisioning, including task sequences, PXE and boot media, driver management, imaging, Windows Autopilot, and deployment troubleshooting.

• Develop and maintain device collections, configuration items, and compliance baselines to identify configuration drift, support targeted deployments, measure compliance, and automate remediation.

• Troubleshoot endpoint-management issues using Configuration Manager logs, Intune monitoring data, Event Viewer, CMPivot, client diagnostics, PowerShell, and related administrative tools.

• Support endpoint identity and security integration with Active Directory, Microsoft Entra ID, Group Policy, Conditional Access dependencies, Microsoft Defender for Endpoint, and enterprise security baselines.

• Coordinate with cybersecurity and vulnerability-management teams to validate findings, identify affected endpoints, implement remediation actions, and track compliance through closure.

• Develop PowerShell scripts and use Microsoft Graph, Graph PowerShell, REST APIs, and related automation capabilities to improve endpoint administration, reporting, remediation, and operational efficiency.

• Support SCCM/MECM infrastructure, co-management, and migration to modern cloud-based endpoint management while following established change, configuration, release, documentation, and operational-readiness processes.

Qualifications

• Active Top Secret security clearance.
• Bachelor’s degree in information technology, computer science, cybersecurity, information systems, or a related field. Significant additional relevant endpoint-management or systems-administration experience may be considered as a substitute for a B.S. degree.
• Minimum of five (5) years of experience administering enterprise Windows endpoint-management services, including SCCM/MECM, Intune, or comparable endpoint-management platforms.
• IAT Level II Certification or equivalent.
• Microsoft 365 Certified: Endpoint Administrator Associate, or the ability to obtain the certification within 6 months of employment. This certification ensures our lead engineer has the enterprise endpoint deployment, application management, policy administration, update management, monitoring, reporting, Intune, Entra ID, PowerShell, and related endpoint operations.

Preferred Certifications:

• Microsoft Certified: Identity and Access Administrator Associate.
• Microsoft 365 Certified: Administrator Expert, or a relevant cybersecurity, IT service management, or systems-administration certification.

Job ID

2026-26021

Work Type

Hybrid

Pay Range

$145,000 - $150,000

Benefits

• Regular - The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of other voluntary benefits. Paid Time Off (PTO) is offered to regular full-time and part-time employees.

Company Description

Suvi, an Akima company, is not just another federal mission services contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.

At Suvi, the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.

For our shareholders, Suvi provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.

For our government customers, Suvi delivers subject matter experts, an agile management approach, and innovative technologies that accomplish customers’ missions safely, securely, and efficiently.

As a Suvi employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.