Responsibilities:

Infrastructure Management:

• Design, implement, and manage multi-tier MECM infrastructures, including Central Administration Sites (CAS), Primary Sites, and Secondary Sites supporting a geographically distributed network.
• Plan and execute MECM version upgrades, site migrations, and cloud-hosted deployments within Microsoft Azure environments.

MECM Functions:

• Develop and maintain MECM functions such as application deployment, patch management, operating system deployment (OSD), and compliance baselines.
• Administer and optimize SQL Server databases for MECM, including replication, indexing, and query performance tuning.

Integration and Compliance:

• Integrate MECM with Intune, Entra ID (Azure AD), Automation platforms, and other cloud services as part of hybrid management strategies.
• Collaborate with cybersecurity teams to implement DISA STIGs, vulnerability mitigation, and endpoint protection integration.

Access Control and Automation:

• Establish and maintain MECM role-based access control (RBAC), boundary groups, and distribution point hierarchies.
• Develop automation scripts in PowerShell to streamline MECM administrative functions and reporting.

Support and Documentation:

• Provide Tier III/IV support for MECM operations and assist with troubleshooting enterprise endpoint management issues.
• Document system architecture, configurations, and standard operating procedures in accordance with enterprise engineering best practices.

System Engineering and SDLC:

• Design and document robust, scalable, and efficient solutions that align with business objectives.
• Lead the documentation and design phases of solutioning, ensuring comprehensive and clear communication of technical specifications and system architectures.
• Collaborate with cross-functional teams to translate business requirements into technical solutions.
• Ensure all solutions adhere to industry best practices and standards.
• Mentor and guide junior team members in documentation and design best practices.

Qualifications:

Required:

• 15+ Years of relevant experience (Bachelor’s Degree in applicable field may be substituted for 5 years of experience).
• Engineering experience, including at least 7 years focused on MECM (SCCM) architecture and administration.
• Proven experience in system engineering and SDLC methodologies.
• Active DoD Secret or higher clearance is required.
• Candidate must be eligible for IT Level II (IAT-II) certification under DoD 8570 requirements.

Technical Skills:

• Expert-level proficiency in MECM hierarchy design, including CAS, Primary, and Secondary sites, as well as Intune co-management configurations of endpoints in a hybrid environment.
• Expert-level proficiency in Windows Server (2016/2019/2022) administration and automation using PowerShell.
• Strong understanding of Active Directory, DNS, PKI, and Group Policy integration within MECM environments.
• Advanced SQL Server management and T-SQL query optimization skills specific to MECM databases.
• Experience with Microsoft Azure infrastructure and MECM cloud integration components.
• Knowledge of networking principles (TCP/IP, firewall, proxy configuration) and MECM communication ports.
• Experience in applying DoD STIGs, cybersecurity controls, and compliance reporting for MECM infrastructure.

Soft Skills:

• Strong communication, documentation, and leadership skills in enterprise operational environments.
• Strong ability to create detailed documentation and design artifacts, including system architecture diagrams, technical specifications, and process flows.
• Excellent communication skills to articulate complex technical concepts to both technical and non-technical stakeholders.
• Experience with various documentation tools and practices.
• Knowledge of agile and traditional SDLC methodologies.

Desired:

• Microsoft Certified: Configuration Manager Administrator Associate or Endpoint Administrator Expert.
• Microsoft Certified: Azure Administrator Associate or Solutions Architect Expert.
• Experience working in DoD, federal, or large enterprise environments with complex compliance requirements.
• Familiarity with Microsoft Defender for Endpoint (MDE), Zero Trust frameworks, and compliance auditing integrations.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is: