Microsoft System Administrator Senior

Science Applications International Corp.; Washington (District of Columbia); On-site; USD 100,000 - 140,000; Full time

Job summary

Science Applications International Corp. (SAIC) is seeking a Senior Endpoint Engineer to design, secure, and optimize an enterprise endpoint ecosystem across Windows, macOS, and iOS devices.

You will manage MECM and Intune, implement modern management workloads, and develop PowerShell automation to support OS deployment and patching standards. The role requires hands-on expertise with Entra ID, CA policies, NIST 800-171, and co-managed MECM workloads, with strong collaboration across Security

Qualifications

• Experience managing MECM/SCCM, Intune, and co-managed configurations.
• Strong Windows, macOS, and iOS lifecycle experience.
• Scripting with PowerShell; REST API integration capabilities.
• Knowledge of Entra ID, Conditional Access and security frameworks (NIST 800-171).
• Experience with OS deployment, patch management, and imaging.
• Ability to query SQL and build reports (Power BI/SSRS).

Responsibilities

• Maintain baseline configurations and workflows for 22K+ devices.
• Engineer Intune profiles, policies, and device management.
• Build and test OS deployment sequences, drivers, BIOS settings.
• Execute monthly Windows and third-party patching and remediation.
• Develop PowerShell tools to automate tasks and remediation.
• Collaborate with Security, Identity, and Network teams; support CAB processes.

Skills

PowerShell scripting

REST API usage

Entra ID/CA

NIST 800-171

CAB change control

ITIL processes

Cross-team collaboration

Education

MCSE - Server Infrastructure

Tools

MECM/SCCM

Microsoft Intune

SQL/Excel

ServiceNow

Co-Management

Dell OpenManage Enterprise

Job description

Description

SAIC is seeking a Senior Endpoint Engineer to engineer, secure, and optimize our enterprise endpoint ecosystem. This position will provide critical support in engineering, securing, and optimizing an enterprise endpoint environment consisting of over 22,000 Windows, macOS, and iOS devices managed through MECM and Microsoft Intune in a co-managed configuration.

This individual will play a primary hands-on role in managing our MECM and Intune environments, executing modern management workloads, building PowerShell automation, and maintaining OS deployment and patching standards across Windows, macOS, and iOS devices.

Responsibilities

• Endpoint Engineering & Administration: Maintain configuration baselines (NIST 800-171) and operational workflows across 22K+ total devices. Handle advanced technical escalations and complex engineering tasks.
• Modern Endpoint Management: Engineer and maintain Intune configuration profiles, compliance policies, Conditional Access/Entra ID integrations, and Apple device management (macOS/iOS) alongside co-managed MECM workloads.
• OS Deployment & Image Engineering: Build and test enterprise OS deployment task sequences, driver packages, BIOS configurations, and application packages with rigorous pre-deployment QA validation.
• Patch Management & Remediation: Execute monthly enterprise patching for Windows and 3rd-party applications, utilizing proactive remediation scripting to hit update compliance targets.
• PowerShell Automation: Develop robust PowerShell scripts, REST API integrations, and tools to automate repetitive engineering tasks and endpoint remediation.
• Cross-Functional Collaboration & Metrics: Collaborate with Security, Identity, and Network teams; participate in CAB change control processes; maintain a CMDB; and build operational dashboards using SQL, SSRS, and Power BI.

Qualifications

Required Qualifications & Technical Skills

• Management Tools: Strong hands-on experience with MECM/SCCM, Microsoft Intune, SQL/Excel, ServiceNow, and Co-Management strategies.
• OS & Hardware Platforms: Practical experience managing Windows workstation and server OS, macOS, and iOS lifecycles.
• Automation: Advanced PowerShell scripting capabilities (REST API usage, remediation scripts, custom tool creation).
• Identity & Security: Solid working knowledge of Entra ID, Conditional Access, and security compliance frameworks (e.g., NIST 800-171).
• Imaging & Deployment: Demonstrated experience creating and troubleshooting OS deployment task sequences, driver updates, and patch rings.
• Reporting & Data: Ability to query SQL databases and build reports using Power BI or SSRS. Ability to parse and review log files and large data sets.
• Collaboration: Experience navigating ITIL change management (CAB) and partnering across security and infrastructure teams.
• Experience with Dell Open Manage Enterprise is a plus.
• Experience Linux/Ansible, and/or Unix experience are a plus
• Must possess a Microsoft Certified Solutions Expert (MCSE) - Server Infrastructure or equivalent.

Target salary range: $100,001 - $140,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.