Microsoft Endpoint Configuration Manager Administrator

Vets Hired; Adelphi (MD); On-site; USD 90,000 - 120,000; Full time

Job summary

Vets Hired is seeking an MECM/SCCM Administrator to manage, secure, and optimize enterprise endpoint management in DoD-aligned environments. You will deploy OS images, patches, and configurations, while developing PowerShell automation and reporting to support compliance and security initiatives.

Responsibilities include maintaining MECM infrastructure, coordinating with cybersecurity teams, and enabling co-management with Microsoft Intune for hybrid management across Windows endpoints.

Qualifications

• U.S. Citizen with active clearance or ability to obtain one.
• DoD 8570/8140 IAT Level II certification or higher.
• 4+ years MECM/SCCM administration in large enterprises.
• Experience with OSD, software packaging, deployment, and patch management.
• Experience with Windows 10/11 enterprise endpoints.
• Experience with Active Directory, Group Policy, DNS, DHCP.
• PowerShell automation scripting experience.
• Knowledge of DISA STIG and DoD cybersecurity regulations.
• Experience with ACAS/Nessus vulnerability tools.
• Baseline certification within 6 months if not obtained.

Responsibilities

• Administer, configure, maintain, and troubleshoot MECM/SCCM infrastructure and endpoint management services.
• Manage software deployment, application packaging, distribution points, collections, task sequences, and baselines.
• Administer OSD, imaging, driver management, and Windows lifecycle management.
• Deploy Windows security updates and third-party patches.
• Perform vulnerability remediation using MECM.
• Monitor MECM site health, client health, content distribution, and performance.
• Create and maintain collections, deployment packages, ADRs, and software update groups.
• Implement endpoint compliance requirements per DoD, STIG, and cybersecurity standards.
• Develop PowerShell automation for endpoint management and reporting.
• Generate compliance, patching, inventory and asset reports using MECM and SQL reporting tools.
• Support Microsoft Intune, co-management, and cloud-based endpoint management.
• Collaborate with cybersecurity teams to remediate vulnerabilities identified via ACAS, Nessus, etc.
• Maintain endpoint security configurations using Group Policy and baselines.
• Develop and maintain technical docs, SOPs, and deployment guides.
• Provide Tier III support for endpoint management issues.
• Act as escalation point for desktop engineering and systems support teams.
• Participate in modernization, endpoint transformation, and cloud migration projects.

Skills

PowerShell scripting

Windows endpoint management

MECM/SCCM administration

Active Directory

DoD cybersecurity regulations

Vulnerability management

Education

DoD 8570/8140 IAT Level II certification or higher

Tools

MECM/SCCM

ACAS

Nessus

SQL Server Reporting Services

Job description

Job Summary

The Microsoft Endpoint Configuration Manager (MECM/SCCM) Administrator is responsible for administering, maintaining, securing, and optimizing enterprise endpoint management services. The role focuses on Windows endpoint management, software deployment, operating system deployment, patch management, compliance, automation, endpoint security, and Microsoft Intune in classified and unclassified environments.

Key Responsibilities

• Administer, configure, maintain, and troubleshoot MECM/SCCM infrastructure and endpoint management services.
• Manage software deployment, application packaging, distribution points, collections, task sequences, and compliance baselines.
• Administer Operating System Deployment (OSD), imaging, driver management, and Windows lifecycle management.
• Deploy Windows security updates and third-party application patches.
• Perform vulnerability remediation using MECM.
• Monitor MECM site health, client health, content distribution, and platform performance.
• Create and maintain collections, deployment packages, ADRs, and software update groups.
• Implement endpoint compliance requirements based on DoD, DISA STIG, and cybersecurity standards.
• Develop PowerShell automation for endpoint management, reporting, software deployment, and operational tasks.
• Generate compliance, patching, inventory, and asset management reports using MECM and SQL-based reporting tools.
• Support Microsoft Intune, co-management, and cloud-based endpoint management technologies.
• Collaborate with cybersecurity teams to remediate vulnerabilities identified through ACAS, Nessus, and other assessment tools.
• Maintain endpoint security configurations using Group Policy, configuration baselines, and security policies.
• Develop and maintain technical documentation, SOPs, implementation guides, and procedures.
• Provide Tier III support for endpoint management issues.
• Serve as a technical escalation point for desktop engineering and systems support teams.
• Participate in infrastructure modernization, endpoint transformation, and cloud migration projects.

Required Qualifications

• U.S. Citizen.
• Active DoD Secret Clearance or ability to obtain and maintain one.
• DoD 8570/8140 IAT Level II certification or higher, such as Security+, CySA+, or equivalent.
• 4+ years of experience administering MECM/SCCM in a large enterprise environment.
• Experience with Operating System Deployment (OSD), software packaging, application deployment, and patch management.
• Experience managing Windows 10/11 enterprise endpoints.
• Experience with Active Directory, Group Policy, DNS, DHCP, and enterprise Windows infrastructure.
• Experience creating and maintaining PowerShell automation scripts.
• Knowledge of DISA STIG compliance requirements and DoD cybersecurity regulations.
• Experience with vulnerability management tools such as ACAS and Nessus.
• Baseline certification required within six months of hire if not already obtained.