Senior Microsoft Endpoint Configuration Manager

GovCIO; Key West (FL); On-site; USD 105,000 - 116,000; Full time

Job summary

GovCIO is seeking a Senior Microsoft Endpoint Configuration Manager to support SOUTHCOM infrastructure in Key West, FL. This onsite role focuses on MECM administration, patch management, software deployment, OSD, and reporting.

You will mentor junior staff, develop SQL-based insights, and ensure compliance with security standards (STIGs/IAVMs), working closely with network and security teams in a DoD environment.

Qualifications

• 9+ years of relevant Systems Administrator experience.
• 5+ years of MECM/SCCM experience.
• Expertise in server hardware, virtualization (VMware/Hyper-V), and network infra; scripting and automation tools (PowerShell, Bash).
• DoD 8140.03 IAT Level II certification within 3 months of start.

Responsibilities

• Architect, configure, and maintain MECM infrastructure across distributed networks.
• Lead enterprise patching strategy for Microsoft OS and third-party apps; remediate vulnerabilities to maintain compliance (STIGs, IAVMs).
• Package, test, and deploy software applications, updates, and PowerShell scripts to endpoints.
• Engineer OS deployment baselines, task sequences, boot images, and drivers for zero-touch provisioning and in-place upgrades.
• Develop SQL queries and SSRS reports for real-time endpoint health and deployment statuses.
• Mentor junior admins and serve as escalation point for complex endpoint issues; produce SOPs.

Skills

MECM/SCCM

PowerShell

Bash

VMware

Hyper-V

SQL

SSRS

CMPivot

Automation

Education

BA/BS in Information Technology, Computer Science, or related field

High School + 9+ years experience

Tools

CMPivot

PowerShell

Job description

GovCIO is currently hiring for a Senior Microsoft Endpoint Configuration Manager to support infrastructure engineering requirements for our SOUTHCOM customer. This position will be located in Key West, FL and will be an onsite position.

Responsibilities

Establishes and maintains smooth operation of computer systems (to include operating systems, software and hardware) in networked or stand-alone configurations, maintains system integrity, and upgrades systems and/or servers as required. Day to day activities include, but are not limited to:

• Infrastructure Engineering- Architect, configure, and maintain the MECM (formerly SCCM) infrastructure, including Primary Sites, Management Points, and Distribution Points across distributed and bandwidth-constrained networks.
• Patch Management & Compliance- Lead the enterprise patching strategy for Microsoft OS and third-party applications. Ensure timely remediation of vulnerabilities to maintain compliance with strict security protocols (e.g., STIGs, IAVMs).
• Software Distribution- Package, test, and deploy complex software applications, updates, and custom PowerShell scripts to tens of thousands of endpoints with minimal user disruption.
• Operating System Deployment (OSD)- Engineer and maintain standard baseline configurations, task sequences, boot images, and driver packages for zero-touch provisioning, bare-metal imaging, and in-place Windows upgrades.
• Reporting & Analytics- Develop advanced custom SQL queries, SSRS reports, and CMPivot queries to provide leadership with real-time visibility into endpoint health, compliance metrics, and deployment statuses.
• Mentorship & Tier 3 Support- Act as the ultimate escalation point for complex endpoint issues. Create detailed technical documentation, SOPs, and provide mentorship to junior system administrators.

Qualifications

High School with 9+ years (or commensurate experience)

Required Skills and Experience:

• Nine (9) or more years of relevant Systems Administrator experience.
• Five years of position-specific experience managing Microsoft Endpoint Configuration Management - MECM/SCCM
• Expertise in server hardware, virtualization technologies (e.g., VMware, Hyper-V), and network infrastructure. Proficiency in scripting and automation tools (e.g., PowerShell, Bash).
• DoD 8140.03 IAT Level II certification within 3 months of commencing work.
• A BA/BS in Information Technology, Computer Science, or a related field may be substituded for experience.

Clearance Required

• US Citizenship is required
• Minimum of an active SECRET clearance to start
• Must be eligible to obtain and maintain a TS/SCI clearance.

Preferred Skills and Experience

• Microsoft Certified: Endpoint Administrator Associate or similar certification
• Experience at a DoD Combatant Command (e.g., SOUTHCOM, NORTHCOM, CENTCOM, CYBERCOM, INDOPACOM, EUCOM, AFRICOM, STRATCOM, TRANSCOM, SOCOM, SPACECOM) or a component is desired.
• Knowledge of Intune, Autopilot, and hybrid device management strategies
• Experience with vulnerability remediation and DISA STIG compliance processes

Posted Salary Range

USD $105,000.00 - USD $116,000.00 /Yr.