Microsoft Configuration Management Engineer (SCCM/MECM and Intune)

Akima; Alexandria (VA); Hybrid; USD 145,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental, Vision insurance

401(k) with match

PTO

Job summary

Suvi, an Akima company, seeks an experienced Microsoft Configuration Management Engineer to manage SCCM/MECM and Intune across on‑premises, hybrid, and cloud environments. You will lead deployments, patching, OS provisioning, and security baselines while collaborating with cybersecurity, architecture, and service desks.

The role emphasizes automation using PowerShell and Graph APIs, with a focus on remediation, monitoring, and auditability in a complex enterprise setting.

Qualifications

• Active Top Secret security clearance is required.
• Bachelor’s degree in information technology, computer science, cybersecurity, information systems, or a related field, or equivalent experience.

Responsibilities

• Administer and support SCCM/MECM and Intune, including deployment and updates.
• Plan and execute enterprise patching and update-management.
• Support OS deployment, provisioning, and deployment troubleshooting.
• Develop and maintain device collections, configuration items, and baselines.
• Troubleshoot endpoint-management issues using logs, telemetry, and PowerShell.
• Coordinate with security teams to implement remediation and track compliance.
• Develop automation using Graph PowerShell and REST APIs to improve operations.
• Support migration to cloud-based endpoint management while adhering to processes.

Skills

Security clearance

Endpoint management

PowerShell

Graph API

CMPivot

Education

Bachelor’s degree or higher

Tools

SCCM/MECM

Intune

PowerShell

Microsoft Graph

CMPivot

Job description

The Microsoft Configuration Management Engineer is responsible for engineering, administering, maintaining, and improving enterprise endpoint management services using Microsoft Configuration Manager (SCCM/MECM) and Microsoft Intune. The engineer supports the full lifecycle of Windows endpoint management, including application packaging and deployment, operating system deployment, software patching, configuration management, compliance monitoring, vulnerability remediation, and endpoint troubleshooting across on-premises, hybrid, and cloud-managed environments.

This position maintains and optimizes Configuration Manager and Intune capabilities, including device collections, task sequences, configuration items and baselines, software update deployments, application packages, compliance policies, configuration profiles, security baselines, and Windows update policies. The engineer works closely with enterprise architects, cloud engineers, cybersecurity teams, service desk personnel, and system owners to sustain existing services and support the transition of appropriate endpoint-management capabilities to Microsoft Intune and Azure-based services.

The engineer plans, schedules, executes, monitors, and validates endpoint deployments and remediation activities using enterprise reporting, endpoint telemetry, client diagnostics, and management tools. The position also supports endpoint-management infrastructure and develops the technical documentation necessary to ensure operational continuity, configuration control, auditability, security compliance, and effective lifecycle management.

Responsibilities

• Administer and support Microsoft Configuration Manager (SCCM/MECM) and Microsoft Intune, including application deployment, software updates, device collections, configuration profiles, compliance policies, security baselines, reporting, and client troubleshooting.
• Package, test, deploy, maintain, and troubleshoot Windows applications across SCCM/MECM- and Intune-managed endpoints.
• Plan and execute enterprise patching and update-management activities, including software update groups, automatic deployment rules, maintenance windows, phased deployments, update rings, feature updates, quality updates, and compliance reporting.
• Support Windows operating system deployment and provisioning, including task sequences, PXE and boot media, driver management, imaging, Windows Autopilot, and deployment troubleshooting.
• Develop and maintain device collections, configuration items, and compliance baselines to identify configuration drift, support targeted deployments, measure compliance, and automate remediation.
• Troubleshoot endpoint-management issues using Configuration Manager logs, Intune monitoring data, Event Viewer, CMPivot, client diagnostics, PowerShell, and related administrative tools.
• Support endpoint identity and security integration with Active Directory, Microsoft Entra ID, Group Policy, Conditional Access dependencies, Microsoft Defender for Endpoint, and enterprise security baselines.
• Coordinate with cybersecurity and vulnerability-management teams to validate findings, identify affected endpoints, implement remediation actions, and track compliance through closure.
• Develop PowerShell scripts and use Microsoft Graph, Graph PowerShell, REST APIs, and related automation capabilities to improve endpoint administration, reporting, remediation, and operational efficiency.
• Support SCCM/MECM infrastructure, co‑management, and migration to modern cloud-based endpoint management while following established change, configuration, release, documentation, and operational‑readiness processes.

Qualifications

• Active Top Secret security clearance.
• Bachelor’s degree in information technology, computer science, cybersecurity, information systems, or a related field. Significant additional relevant endpoint‑management or systems‑administration experience may be considered as a substitute for a B.S. degree.
• Minimum of five (5) years of experience administering enterprise Windows endpoint‑management services, including SCCM/MECM, Intune, or comparable endpoint‑management platforms.
• IAT Level II Certification or equivalent.
• Microsoft 365 Certified: Endpoint Administrator Associate, or the ability to obtain the certification within 6 months of employment. This certification ensures our lead engineer has the enterprise endpoint deployment, application management, policy administration, update management, monitoring, reporting, Intune, Entra ID, PowerShell, and related endpoint operations.

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator Associate.
• Microsoft 365 Certified: Administrator Expert, or a relevant cybersecurity, IT service management, or systems‑administration certification.

Job ID

2026-26021

Work Type

Hybrid

Pay Range

$145,000 - $150,000

Benefits

• Regular - The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of other voluntary benefits.
• Paid Time Off (PTO) is offered to regular full-time and part-time employees.

Work Where it Matters

Suvi, an Akima company, is not just another federal mission services contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.

At Suvi, the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.

For our shareholders, Suvi provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.

For our government customers, Suvi delivers subject matter experts, an agile management approach, and innovative technologies that accomplish customers’ missions safely, securely, and efficiently.

As a Suvi employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.

Job ID:26021-en-us