Microsoft Endpoint Configuration Manager (MECM) Subject Matter Expert (SME) and Team Lead

Leidos; Arlington (VA); On-site; USD 92,000 - 167,000; Full time

Job summary

Leidos in Arlington, VA is seeking a senior MECM/Endpoint Management specialist to lead and mentor MECM administrators, oversee daily operations, and set technical standards for enterprise Windows management.

The role focuses on vulnerability remediation, patching, security compliance with DISA STIGs, IAVMs, RMF, and coordinating with Cyber Compliance and infrastructure teams. Strong PowerShell, reporting, and automation skills are required to drive remediation across the organization.

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity, Engineering, or related field.
• 7+ years of hands-on enterprise MECM/SCCM experience at SME level.
• Experience leading teams of System Administrators/Engineers with technical direction.
• Hands-on experience implementing DoD STIG mitigations and validating compliance.
• US Citizenship with an active Top Secret clearance for NIPRNet/SIPRNet access.
• Must meet DoD 8570/8140 IAT Level II certification (Security+ CE, CySA+, GSEC, or equivalent).
• Advanced knowledge of MECM architecture, software update management, Windows imaging, and compliance management.
• Experience with RMF, IAVMs, CTOs, FRAGOs and remediation timelines.

Responsibilities

• Lead and mentor MECM administrators and oversee daily operations.
• Manage vulnerability remediation, patching, and policy compliance using MECM.
• Coordinate with Cyber Compliance and infrastructure teams to validate remediation efforts.
• Develop and maintain Windows imaging, MECM task sequences, and deployment pipelines.
• Administer MECM infrastructure including site servers, DP, WSUS/SUP, SQL Server, AD, and GP.
• Automate deployments and reporting using PowerShell and MECM baselines.
• Provide updates to DISA leadership and government stakeholders.

Skills

MECM/SCCM expertise

Team leadership

Vulnerability remediation

PowerShell scripting

Cybersecurity compliance

Windows imaging

Automation & reporting

Education

Bachelor's degree in Computer Science / IT / Cybersecurity / Engineering

Tools

SQL Server

Active Directory

WSUS/SUP

PKI

SSRS / Power BI

CMTrace

Job description

Primary Responsibilities

• Technical Leadership: Lead and mentor MECM administrators, oversee daily operations, establish technical standards, and resolve complex enterprise endpoint management issues.
• Vulnerability Remediation & Patching: Manage enterprise software updates, security patching, and vulnerability remediation using MECM. Ensure compliance with DISA STIGs, IAVMs, CTOs, FRAGOs, and other cybersecurity requirements.
• Cybersecurity Compliance: Coordinate with Cyber Compliance, DCO, and infrastructure teams to validate remediation efforts using MECM, ACAS/Tenable, and Trellix. Support RMF, POA&M tracking, audits, and compliance reporting.
• Operating System & Application Deployment: Develop and maintain Windows imaging solutions, MECM task sequences, PXE services, application packaging, software deployments, and operating system upgrades.
• MECM Infrastructure Management: Administer and troubleshoot MECM infrastructure, including site servers, distribution points, WSUS/SUP, SQL Server, Active Directory, Group Policy, and related enterprise technologies.
• Automation & Reporting: Utilize PowerShell, MECM compliance baselines, and reporting tools to automate deployments, improve endpoint health, and track vulnerability remediation and system performance.
• Operational Support & Coordination: Lead troubleshooting, root-cause analysis, infrastructure upgrades, and service recovery efforts. Coordinate technical activities and provide updates to DISA leadership and government stakeholders.

Basic Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or an equivalent combination of education and experience.
• Minimum of 7 years of recent, hands-on enterprise Microsoft Endpoint Configuration Manager (MECM/SCCM) experience at the Subject Matter Expert (SME) level, including advanced administration, troubleshooting, software deployment, patch management, and endpoint configuration.
• Demonstrated experience leading teams of System Administrators and/or Engineers, including providing technical direction, mentoring personnel, managing priorities, and resolving complex enterprise technical issues.
• Hands-on experience applying and implementing DoD Security Technical Implementation Guide (STIG) mitigations, including identifying security findings, executing remediation actions, and validating compliance across enterprise Windows environments.
• U.S. Citizenship with an active Top Secret clearance or higher, and the ability to access NIPRNet and SIPRNet environments.
• Must meet DoD 8570/8140 IAT Level II certification requirements (Security+ CE, CySA+, GSEC, or equivalent) prior to starting, along with an appropriate Microsoft Computing Environment certification.
• Advanced knowledge of MECM architecture, software update management, application deployment, Windows imaging, task sequences, vulnerability remediation, and compliance management.
• Experience supporting DoD cybersecurity requirements, including IAVMs, CTOs, FRAGOs, and mandated remediation timelines.
• Strong working knowledge of MECM infrastructure, Windows Server, WSUS/SUP, SQL Server, Active Directory, Group Policy, and PKI.
• Proficiency with PowerShell scripting, automation, and MECM compliance reporting using SQL, SSRS, Power BI, or similar tools.
• Experience with ACAS/Tenable, Trellix, or comparable cybersecurity tools, along with knowledge of RMF and POA&M processes.
• Strong technical troubleshooting, communication, documentation, and customer engagement skills.
• Must reside in the Washington, DC metropolitan area, possess reliable transportation, and be available to work 100% onsite at designated DISA facilities, including the Pentagon, Crystal Gateway, Taylor Building, or Mark Center.

Preferred Qualifications

• Advanced experience with MECM software updates, WSUS, Automated Deployment Rules (ADRs), phased deployments, and enterprise patch management.
• Strong troubleshooting experience with MECM infrastructure and endpoints using PowerShell, CMTrace, WMI, system logs, and diagnostic tools.
• Working knowledge of SQL Server, MECM databases, SQL/WQL queries, CMPivot, and reporting tools such as SSRS.
• Experience with Microsoft Intune, Entra ID, and MECM/Intune co-management in hybrid enterprise environments.
• Experience supporting large-scale DoD environments, cybersecurity compliance, infrastructure modernization, and mission-critical endpoint operations.

Pay Range: $92,300.00 - $166,850.00

Pay and Benefits: Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Commitment and Diversity: All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2 billion for the fiscal year ended January 2, 2026. For more information, visit www.Leidos.com.