SCCM Administrator

MWResource, Inc.; Austin (TX); Hybrid; USD 80,000 - 92,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Disability coverage

Life insurance

401K plan

Job summary

MWResource, Inc. in Austin, TX is seeking an experienced SCCM Administrator to manage our endpoint infrastructure, including SCCM, GPO, Intune, and third‑party patch management. You will own day‑to‑day Configuration Manager operations and lead co‑management efforts with Intune.

The role requires 5+ years SCCM experience, strong GPO skills, PowerShell, and patching expertise. Hybrid schedule (2–3 days in office) in the Austin area; base pay range is $58–$67 per hour.

Qualifications

• Bachelor’s degree in Computer Information Systems, Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• 5+ years administering SCCM in an enterprise environment.
• Hands-on experience designing and troubleshooting GPOs in a multi-domain/multi-OU AD environment, including diagnosing conflicts and performance issues via RSoP, GPResult, and Event Viewer.
• Strong knowledge of Windows Server, Active Directory, and core networking concepts.
• PowerShell scripting experience, particularly for GPO management and reporting.
• SQL Server proficiency for SCCM reporting and troubleshooting.
• Experience with SQL Server Always On Availability Groups in a multi-server SCCM environment.
• Experience building and customizing SSRS reports for SCCM beyond out-of-box reporting.
• Hands-on Intune experience: co-management enrollment, application deployment, and Company Portal support.
• Experience with PKI infrastructure and certificate management.
• Experience with third-party patch management tools (Patch My PC or similar).
• Proficiency using CMTrace to sort through SCCM client/server logs, Windows Event Logs, IIS logs, and Patch My PC logs, with working knowledge of which specific logs to reference based on the issue (e.g., client install, policy, content, patching) to diagnose and resolve issues.

Responsibilities

• Administer, deploy, and maintain SCCM infrastructure supporting software distribution, patch management, and endpoint security.
• Build and maintain packages, applications, collections, and deployments.
• Manage client health — troubleshooting agent issues, re-installs, and discovery/push methods.
• Administer Software Update Point (SUP)/WSUS, including sync troubleshooting and Automatic Deployment Rule (ADR) management.
• Own monthly Patch Tuesday cadence, including third-party patching via Patch My PC.
• Manage Distribution Points and content distribution, monitoring for failures and DP health.
• Configure and maintain boundaries/boundary groups for correct client site assignment and content routing.
• Support OS Deployment (OSD) — task sequences for imaging/re-imaging and driver package management.
• Use CMPivot for real-time device queries and rapid troubleshooting.
• Configure maintenance windows and client settings.
• Monitor system health and troubleshoot issues to ensure optimal performance.
• Develop reports on deployment status, patch compliance, and hardware inventory.
• Design, implement, and manage GPOs enforcing security baselines and configuration standards.
• Diagnose and resolve policy conflicts, replication issues, and slow processing using RSoP, GPResult, and Event Viewer.
• Optimize GPO performance (link order, enforcement, WMI filters, item-level targeting).
• Establish governance and change control — test OU, approval workflow, rollback plans — and maintain documentation for audit and knowledge transfer.
• Enroll and configure workstations for co-management between SCCM and Intune, including Windows Autopilot deployment.
• Package, deploy, and monitor applications; manage Company Portal experience and troubleshoot enrollment issues.
• Maintain compliance and configuration policies, including BitLocker management and app protection (MAM) policies.
• Coordinate with Conditional Access policies to ensure compliance status supports access requirements.
• Partner with other IT teams to integrate SCCM, GPO, Intune, and patch management tooling with broader infrastructure.
• Enforce security best practices across all platforms.
• Serve as a technical resource for other IT staff on SCCM/GPO/Intune matters.
• Support software licensing and compliance reporting using SCCM inventory data as needed.
• Keep current with platform updates and industry best practices.

Skills

SCCM admin

Group Policy

Intune co-management

PowerShell

SQL Server

OSD imaging

Patch management

SSRS reporting

PKI management

CMTrace

Patch My PC

Education

Bachelor's degree

Tools

Patch My PC

Active Directory

WSUS

CMPivot

Power BI

CMTrace

Job description

Hybrid: Austin Metro Area, 2-3 days in office per week

Duration: 2 years

Job Summary

We're looking for an experienced SCCM (Security Center Configuration Manager) Administrator to manage our endpoint infrastructure — spanning SCCM, Group Policy, Microsoft Intune, and third-party patch management tooling (Patch My PC). You'll own day-to-day administration of our Configuration Manager environment, drive governance and cleanup of our GPO landscape, and lead application deployment and co-management efforts through Intune. This role suits someone who's comfortable owning complex, multi-system environments and bringing order to them.

What You'll Do

SCCM

• Administer, deploy, and maintain SCCM infrastructure supporting software distribution, patch management, and endpoint security
• Build and maintain packages, applications, collections, and deployments
• Manage client health — troubleshooting agent issues, re-installs, and discovery/push methods
• Administer Software Update Point (SUP)/WSUS, including sync troubleshooting and Automatic Deployment Rule (ADR) management
• Own monthly Patch Tuesday cadence, including third-party patching via Patch My PC
• Manage Distribution Points and content distribution, monitoring for failures and DP health
• Configure and maintain boundaries/boundary groups for correct client site assignment and content routing
• Support OS Deployment (OSD) — task sequences for imaging/re-imaging and driver package management
• Use CMPivot for real-time device queries and rapid troubleshooting
• Configure maintenance windows and client settings
• Monitor system health and troubleshoot issues to ensure optimal performance
• Develop reports on deployment status, patch compliance, and hardware inventory

Group Policy

• Design, implement, and manage GPOs enforcing security baselines and configuration standards across the domain
• Diagnose and resolve policy conflicts, replication issues, and slow processing using RSoP, GPResult, and Event Viewer
• Optimize GPO performance (link order, enforcement, WMI filters, item-level targeting)
• Establish governance and change control — test OU, approval workflow, rollback plans — and maintain documentation for audit and knowledge transfer
• Enroll and configure workstations for co-management between SCCM and Intune, including Windows Autopilot deployment
• Package, deploy, and monitor applications; manage Company Portal experience and troubleshoot enrollment issues
• Maintain compliance and configuration policies, including BitLocker management and app protection (MAM) policies
• Coordinate with Conditional Access policies to ensure compliance status supports access requirements

Cross-Functional

• Partner with other IT teams to integrate SCCM, GPO, Intune, and patch management tooling with broader infrastructure
• Enforce security best practices across all platforms
• Serve as a technical resource for other IT staff on SCCM/GPO/Intune matters
• Support software licensing and compliance reporting using SCCM inventory data as needed
• Keep current with platform updates and industry best practices

Required Qualifications

• Bachelor’s degree in Computer Information Systems, Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• 5+ years administering SCCM in an enterprise environment
• Hands-on experience designing and troubleshooting GPOs in a multi-domain/multi-OU AD environment, including diagnosing conflicts and performance issues via RSoP, GPResult, and Event Viewer
• Strong knowledge of Windows Server, Active Directory, and core networking concepts
• PowerShell scripting experience, particularly for GPO management and reporting
• SQL Server proficiency for SCCM reporting and troubleshooting
• Experience with SQL Server Always On Availability Groups in a multi-server SCCM environment
• Experience building and customizing SSRS reports for SCCM beyond out-of-box reporting
• Hands-on Intune experience: co-management enrollment, application deployment, and Company Portal support
• Experience with PKI infrastructure and certificate management
• Experience with third-party patch management tools (Patch My PC or similar)
• Proficiency using CMTrace to sort through SCCM client/server logs, Windows Event Logs, IIS logs, and Patch My PC logs, with working knowledge of which specific logs to reference based on the issue (e.g., client install, policy, content, patching) to diagnose and resolve issues

Preferred Qualifications

• GPMC experience for modeling, testing, and auditing policy changes pre-deployment
• Configuration Manager Task Sequences and OSD imaging experience
• Power BI

The base pay range for this role is $58 - $67 per Hour.

MWResource offers medical, dental and vision coverage through Florida Blue, short- and long-term disability coverage, employer paid life insurance, and participation in the MWResource 401K plan for US based consultants.

Applications accepted on a rolling basis until filled.

MWResource does not discriminate based on race, gender, color, religion, national origin, age, disability, veteran status, or anything else that makes you part of any group.

Candidates must be authorized to work in the United States.

Candidates will be required to pass a background check and drug screening.

Please note we are not open to outsourcing our recruitment needs.