Microsoft Endpoint Configuration Manager (MECM) Subject Matter Expert (SME) andTeam Lead

Leidos; Arlington (VA); On-site; USD 92,000 - 167,000; Full time

Job summary

Leidos is seeking an experienced MECM Subject Matter Expert and Team Lead in the Arlington, VA area to guide a team of MECM administrators focused on end-to-end enterprise endpoint management, patching, imaging, and application deployment for classified and unclassified networks.

The ideal candidate will have 7+ years of MECM/SCCM hands-on experience at SME level, Top Secret clearance, and DoD/STIG and RMF familiarity. This onsite role requires strong leadership and cross-team collaboration.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 7+ years hands-on MECM/SCCM SME experience at SME level.
• Experience leading teams of System Administrators/Engineers.
• Hands-on DoD STIG mitigations and compliance actions.
• Active Top Secret clearance or higher; ability to access DoD networks.
• IAT Level II certification requirements fulfilled.
• Strong MECM architecture and patch management knowledge.
• Experience with RMF/POA&M processes.

Responsibilities

• Lead MECM administrators; set technical standards and resolve complex issues.
• Manage enterprise patching and vulnerability remediation using MECM; ensure DISA STIG compliance.
• Coordinate with Cyber Compliance, DCO, and infra teams to validate remediation.
• Develop Windows imaging, MECM task sequences, PXE services, and deployments.
• Administer MECM infra: site servers, distribution points, WSUS/SUP, SQL Server, AD, GPO, PKI.
• Automate deployments and reporting with PowerShell and MECM baselines.
• Lead troubleshooting and provide updates to DISA leadership and stakeholders.

Skills

MECM SME

Team Leadership

PowerShell

Vulnerability Remediation

DoD STIG

RMF/POA&M

Windows Server

SQL Server

Active Directory

Group Policy

PKI

ACAS/Tenable

Trellix

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

ACAS/Tenable

Trellix

SQL Server

WSUS

SCCM

PXE

CMTrace

Job description

Description

Leidos Digital Modernization Sector is seeking an experienced, hands-on Microsoft Endpoint Configuration Manager (MECM) Subject Matter Expert (SME) and Team Lead to support DISA J-6/J-9 operations in the National Capital Region in Arlington, VA.

The selected candidate will lead a team of MECM administrators responsible for enterprise endpoint management, vulnerability remediation, patching, operating system imaging, application deployment, and infrastructure sustainment across classified and unclassified networks. This position requires strong technical leadership, advanced MECM expertise, and the ability to collaborate with cybersecurity teams, infrastructure personnel, and government stakeholders to ensure operational readiness and compliance with DoD security requirements.

Clearance: Top Secret at time of consideration

Primary Responsibilities:

• Technical Leadership: Lead and mentor MECM administrators, oversee daily operations, establish technical standards, and resolve complex enterprise endpoint management issues.
• Vulnerability Remediation & Patching: Manage enterprise software updates, security patching, and vulnerability remediation using MECM. Ensure compliance with DISA STIGs, IAVMs, CTOs, FRAGOs, and other cybersecurity requirements.
• Cybersecurity Compliance: Coordinate with Cyber Compliance, DCO, and infrastructure teams to validate remediation efforts using MECM, ACAS/Tenable, and Trellix. Support RMF, POA&M tracking, audits, and compliance reporting.
• Operating System & Application Deployment: Develop and maintain Windows imaging solutions, MECM task sequences, PXE services, application packaging, software deployments, and operating system upgrades.
• MECM Infrastructure Management: Administer and troubleshoot MECM infrastructure, including site servers, distribution points, WSUS/SUP, SQL Server, Active Directory, Group Policy, and related enterprise technologies.
• Automation & Reporting: Utilize PowerShell, MECM compliance baselines, and reporting tools to automate deployments, improve endpoint health, and track vulnerability remediation and system performance.
• Operational Support & Coordination: Lead troubleshooting, root-cause analysis, infrastructure upgrades, and service recovery efforts. Coordinate technical activities and provide updates to DISA leadership and government stakeholders.

Basic Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or an equivalent combination of education and experience.
• Minimum of 7 years of recent, hands-on enterprise Microsoft Endpoint Configuration Manager (MECM/SCCM) experience at the Subject Matter Expert (SME) level, including advanced administration, troubleshooting, software deployment, patch management, and endpoint configuration.
• Demonstrated experience leading teams of System Administrators and/or Engineers, including providing technical direction, mentoring personnel, managing priorities, and resolving complex enterprise technical issues.
• Hands-on experience applying and implementing DoD Security Technical Implementation Guide (STIG) mitigations, including identifying security findings, executing remediation actions, and validating compliance across enterprise Windows environments.
• U.S. Citizenship with an active Top Secret clearance or higher, and the ability to access NIPRNet and SIPRNet environments.
• Must meet DoD 8570/8140 IAT Level II certification requirements (Security+ CE, CySA+, GSEC, or equivalent) prior to starting, along with an appropriate Microsoft Computing Environment certification.
• Advanced knowledge of MECM architecture, software update management, application deployment, Windows imaging, task sequences, vulnerability remediation, and compliance management.
• Experience supporting DoD cybersecurity requirements, including IAVMs, CTOs, FRAGOs, and mandated remediation timelines.
• Strong working knowledge of MECM infrastructure, Windows Server, WSUS/SUP, SQL Server, Active Directory, Group Policy, and PKI.
• Proficiency with PowerShell scripting, automation, and MECM compliance reporting using SQL, SSRS, Power BI, or similar tools.
• Experience with ACAS/Tenable, Trellix, or comparable cybersecurity tools, along with knowledge of RMF and POA&M processes.
• Strong technical troubleshooting, communication, documentation, and customer engagement skills.
• Must reside in the Washington, DC metropolitan area, possess reliable transportation, and be available to work 100% onsite at designated DISA facilities, including the Pentagon, Crystal Gateway, Taylor Building, or Mark Center.

Preferred Qualifications:

• Advanced experience with MECM software updates, WSUS, Automated Deployment Rules (ADRs), phased deployments, and enterprise patch management.
• Strong troubleshooting experience with MECM infrastructure and endpoints using PowerShell, CMTrace, WMI, system logs, and diagnostic tools.
• Working knowledge of SQL Server, MECM databases, SQL/WQL queries, CMPivot, and reporting tools such as SSRS.
• Experience with Microsoft Intune, Entra ID, and MECM/Intune co-management in hybrid enterprise environments.
• Experience supporting large-scale DoD environments, cybersecurity compliance, infrastructure modernization, and mission-critical endpoint operations.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting

October 19, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range

Pay Range $92,300.00 - $166,850.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at .

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.