The Microsoft Configuration Management Administrator operates, monitors, and supports enterprise endpoint management services using Microsoft Configuration Manager (SCCM/MECM) while supporting the organization's transition to Microsoft Intune and cloud-based endpoint management.
Performs day-to-day administration of application deployments, software updates, device collections, operating system deployment task sequences, configuration baselines, endpoint compliance, and vulnerability-remediation activities across enterprise Windows environments.
This position investigates and resolves endpoint-management issues using Configuration Manager tools, reports, client logs, endpoint diagnostics, PowerShell, and established support procedures. Administrator executes approved changes, patch deployments, software releases, remediation actions, and configuration updates in accordance with change-management, cybersecurity, and operational requirements.
Works closely with senior engineers, architects, cloud teams, cybersecurity personnel, service desk teams, and system owners to sustain existing endpoint-management services and support the migration of appropriate workloads to Microsoft Intune and other cloud-based capabilities.
Administrator also maintains technical documentation, deployment records, operating procedures, and configuration information required to support service continuity, auditability, security compliance, and reliable operations.
Responsibilities- Administer and support Microsoft Configuration Manager (SCCM/MECM), including application deployment, software updates, device collections, task sequences, configuration baselines, inventory, reporting, and client troubleshooting.
- Package, test, deploy, maintain, and troubleshoot Windows applications across enterprise endpoints, including installation, detection, dependency, and removal requirements.
- Execute and monitor enterprise Windows patching and update deployments using software update groups, automatic deployment rules, maintenance windows, phased deployments, and compliance reporting.
- Support Windows operating system deployment and provisioning, including task sequences, PXE and boot media, driver management, imaging, application sequencing, and deployment troubleshooting.
- Create and maintain device collections, configuration items, and compliance baselines to support targeted deployments, detect configuration drift, measure compliance, and enable approved remediation.
- Troubleshoot endpoint-management issues using Configuration Manager logs, Event Viewer, CMPivot, console monitoring, client diagnostics, reporting tools, PowerShell, and related administrative utilities.
- Support Active Directory, Microsoft Entra ID, Group Policy, device registration, endpoint identity management, and related Windows device lifecycle activities.
- Coordinate with cybersecurity personnel to remediate endpoint vulnerabilities, implement security configurations, monitor compliance, and support Microsoft Defender for Endpoint and related security controls.
- Support Microsoft Intune and co-management capabilities, including device enrollment, application deployment, compliance policies, configuration profiles, update rings, Windows Autopilot, and the phased migration of workloads from SCCM/MECM to cloud management.
- Use PowerShell and related scripting tools to automate routine endpoint-administration, reporting, remediation, and support activities while maintaining required change records, procedures, and technical documentation.
Qualifications- Active Secret security clearance.
- Bachelor's degree in information technology, computer science, cybersecurity, information systems, or a related field. Significant and relevant endpoint-management, desktop engineering, or systems-administration experience may be considered as a substitute for a bachelor's degree.
- Minimum of 3 years of experience administering enterprise Windows endpoint-management services, including SCCM/MECM, Intune, or a comparable endpoint-management platform.
- IAT Level II certification, such as CompTIA Security+ CE, or equivalent.
- Microsoft 365 Certified: Endpoint Administrator Associate, or the ability to obtain the certification within 6 months of employment.
- Any clearance requirements for this position are established by the government contract.
Preferred Certifications: - Microsoft Certified: Identity and Access Administrator Associate.
- Microsoft 365 Certified: Administrator Expert.
- Relevant Microsoft Azure, cybersecurity, IT service management, PowerShell, or systems-administration certifications.
Job ID2026-25998
Work TypeHybrid
Pay Range$110,000 - $125,000
Benefits Regular - The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of other voluntary benefits. Paid Time Off (PTO) is offered to regular full-time and part-time employees.
