We are seeking an experienced Endpoint Engineer with significant SCCM and Microsoft Intune experience to join our team on a contract supporting the Department of Homeland Security. In this role, you will be part of a dynamic team of Systems and Desktop Engineers and security specialists with experience in Azure, Microsoft Intune, Windows, System Center Configuration Manager (SCCM/MECM), Enterprise Patching, PKI/Certificates, Active Directory, Virtualization, and advanced scripting. You will work across endpoint management and server operations teams to ensure adherence to customer SLAs while driving automation through cloud-native solutions and testing of new/emerging technologies to deliver faster deployments and decreased workload.
Responsibilities:
- Lead Microsoft Intune administration and engineering, including policy creation and management, application deployment, device compliance, and conditional access configurations.
- Design and implement hybrid cloud solutions leveraging Azure AD and on-premises Active Directory for seamless identity management.
- Utilize Azure Automation and Intune to manage and secure cloud-based and on-premises Windows workstations and servers, ensuring they are patched to correct levels.
- Develop and maintain Azure-based system templates and images for rapid deployment.
- Manage and maintain Windows Server 2016/2019/2022 systems and Windows 11 PC images in both Azure and on-premises environments.
- Identify, analyze, and resolve system problems with both short-term workarounds and long-term cloud-based solutions.
- Write advanced PowerShell scripts and leverage Azure Functions to automate systems administration tasks across cloud and on-premises environments.
- Implement and manage Microsoft Endpoint Manager (Intune + SCCM) for comprehensive endpoint management.
- Design and implement Azure-based security solutions, including Azure Security Center and Azure Sentinel.
- Provide guidance and work leadership to less-experienced cloud and systems engineers.
Required Qualifications:
- Ability to attain DHS EOD
- BA or BS + 7 years of applicable experience
- 5+ years SCCM experience supporting software packaging and patching
- 5+ years Intune Autopilot administration
- Strong working knowledge of SCCM and Intune to include device enrollment, policy management, application deployment, compliance enforcement, and conditional access
- Solid understanding of VMware vCenter
- Functional understanding of Microsoft SQL Server and Active Directory
- Expertise in MDT and SCCM (capturing images (.WIM), creating packages, advertisements, task sequences, operating system deployment (OSD) and queries)
- Solid knowledge of PowerShell scripting to automate tasking and customize configurations
- Expertise with IAVA process including CYBERCOM release process, testing, approval and deployment processes
- Solid knowledge of Active Directory Security Groups, OUs, DNS, and GPO management
- Solid Windows troubleshooting skills
- Strong understanding of networking concepts including VPN and certificate-based authentication
- Microsoft Certified Endpoint Administrator Associate
- SCCM Certification
Desired Qualifications:
- ITIL v4 certification
- Microsoft Endpoint Manager Specialist Certified
- Microsoft 365: Modern Desktop Administrator Associate Certified
- Autopilot experience
- Cloud services familiarity, particularly Microsoft Azure