Systems Engineer- MECM

Indigo IT LLC; Ashburn (VA); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, Dental, and Vision coverage

401(k) with company match

Paid time off and holidays

Education assistance

In-house training programs

Job summary

Indigo IT LLC in Ashburn, VA is seeking a Systems Engineer- Intermediate to administer a distributed Windows desktop environment, manage MECM and Intune, and support BeyondTrust within a hybrid telework setup.

The role delivers Tier III/IV user support, creates technical guidance, and helps with OS deployments, security updates, and configuration of client systems in a complex enterprise.

Qualifications

• Strong understanding of Windows 10/11 and enterprise management systems.
• Experience with large distributed environments and OS deployments.

Responsibilities

• Provide operations and maintenance support of MECM, Intune, BeyondTrust and related updates.
• Perform Tier III/IV troubleshooting of client workstation issues including AutoPilot, OOBE, and distribution points.
• Fulfill ad-hoc reporting and information requests for client workstation systems.
• Handle end user and change requests for software deployments, security updates, and configuration of workstations.
• Write technical documents, propose process improvements, and develop technical approaches.
• Mentor junior team members and provide guidance as needed.
• Perform additional duties as assigned.

Skills

Windows administration

PowerShell scripting

Active Directory & GPOs

Enterprise management experience

Cybersecurity awareness

Communication skills

Analytical skills

Team mentoring

Problem solving

Education

Bachelor’s degree in Information Systems

Tools

MECM (SCCM)

Microsoft Intune

BeyondTrust

MS Graph API

Hyper-V

App-V

SCORCH

Power Automate

Job description

Systems Engineer- Intermediate

Ashburn, VA (hybrid telework and occasional onsite)

POSITION SUMMARY

As an integral member of the CBP End User Device IT Management Services team, the Systems Engineer will be responsible for administration of a distributed Windows desktop environment, maintaining BeyondTrust remote workstations support, utilizing enterprise-scale technical experience with cloud and hybrid infrastructures, and internet-based devices. The ideal candidate will work collaboratively across teams providing Tier III/IV support to end users through the effective use and management of the enterprise ticket management system with expedient resolution to trouble tickets, service requests, break fixes, and change requests. This role shall adhere to established procedures and approved cybersecurity practices while delivering exceptional customer support.

ESSENTIAL FUNCTIONS/RESPONSIBILITIES

• Provide operations and maintenance support of Microsoft Endpoint Configuration Manager (MECM) infrastructure, Microsoft Intune, BeyondTrust, and updates to include troubleshooting issues when they arise.
• Perform Tier III/IV troubleshooting of issues pertaining to client workstation systems, AutoPilot, Out of Box Experience (OOBE), and distribution points
• Fulfill requests for ad-hoc reporting and information regarding client workstation systems
• Fulfill end user and change requests for operational engineering assignments pertaining to software deployments, security updates, and overall configuration of client workstation systems
• Write technical support documents, develop technical approaches, and provide recommendations to improve upon current processes where necessary.
• Provide mentoring and assistance with junior team personnel when needed
• Perform additional duties as assigned

EDUCATION, EXPERIENCE, and CERTIFICATIONS

• Current CBP Background Investigation -or- US Citizenship with ability to obtain a Federal Public Trust clearance (REQUIRED).
• Bachelor’s degree in Information Systems (or related field) OR 3-5 years of relevant IT experience
• Certifications in A+, Security+, BeyondTrust, Microsoft 365 Endpoint Administrator, or MECM related are a plus.

SPECIFIC KNOWLEDGE, SKILLS, & ABILITIES, and QUALIFICATIONS

• Strong understanding of Windows 10 and 11 operating systems
• Proficient skill level utilizing and maintaining enterprise management systems with Microsoft Intune and MECM to include management of assets, scope tags, collections, software distributions, updates, and reports/queries
• Demonstrated experience within a distributed environment of at least 5,000 workstations and/or servers, 20,000+ workstations a plus, 75,000+ in government setting ideal
• Experience utilizing scripting and/or programming languages such as PowerShell, C++ (Visual Studio), and MS Graph API to automate processes and manage system configuration
• Thorough understanding of Windows Installer technology and significant experience configuring applications for silent or unattended deployments
• Understanding of Active Directory, including implementing and troubleshooting Group Policy Objects (GPOs) and Group Policy Preferences (GPPs), as well as experience with Entra ID and Configuration Service Provider (CSP) management
• Ability to troubleshoot application installations and end user issues pertaining to usage of various desktop applications (BeyondTrust, Corretto, M365 Apps, Adobe products, and numerous other third‑party applications)
• Strong understanding of Edge and Google Chrome (security zones, document modes, add‑ons) and ability to troubleshoot/identify web app and site security or compatibility related issues
• Understanding of Line-of-Business (LOB) apps with regards to provisioning (side‑loading) and troubleshooting failed installations or updates
• Knowledge of application virtualization using App-V (or similar product)
• Experience using Microsoft Endpoint Configuration Manager Task Sequences (or similar product) for the purposes of building or performing Operating System Deployments (OSD) requiring multiple steps
• Excellent process‑oriented skills with regards to configuration management and troubleshooting within a complex enterprise environment
• Strong analytical skills with the ability to analyze data sets to determine trends and identify strategies
• Outstanding interpersonal and communication skills with the ability to effectively communicate across diverse audiences and influence cross functionally
• Ability to multi‑task and be creative and innovative in a dynamic, fast paced matrix team environment
• Use of Remote Admin Tools as well as Hyper‑V systems for building and validating test cases
• Experience with Power Automate and workflow automation tools such as SCORCH are a plus
• Experience with LAPS and BitLocker a plus
• Proficient level understanding of cybersecurity ramifications of group policy settings.
• Experience with Security Technical Implementation Guidelines (STIG) a plus.

• We offer an expansive benefits package for our employees, which includes: Medical, Dental, and Vision coverage options.
• In addition, we offer 401(k) with company match, Group life and disability, Flex Spending Accounts (FSA), Paid Time Off (PTO), Paid holidays, and Education assistance.
• We also have in house training programs for employees, we reward thought leadership with bonuses and recognition for publishing, speaking, and innovative thought leadership in our industry.

Indigo IT is committed to hiring and retaining a diverse workforce.

We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.

This employer uses E-Verify.