Microsoft Infrastructure Consultant

The role will focus heavily on Microsoft Endpoint Configuration Manager (MECM/SCCM), Microsoft Intune, Active Directory, Windows 10/11, OS Deployment (OSD), imaging, application packaging, patch management, PowerShell automation, and related on-premises and cloud technologies.

The consultant will support a large enterprise environment of approximately 30,000 computers and laptops, helping maintain existing infrastructure in a state of good repair while supporting modernization, upgrades, projects, and future technology initiatives., * Administer and support enterprise Microsoft Endpoint Configuration Manager (MECM/SCCM) environments.

• Manage SCCM infrastructure components including Management Points, Distribution Points, Software Update Points, Boundary Groups, Collections, Client Settings, content distribution, and client health.
• Administer Microsoft Intune, including device enrollment, configuration profiles, compliance policies, security baselines, endpoint security policies, application deployment, Windows Update policies, and co-management.
• Design, configure, and support Windows Operating System Deployment (OSD) and imaging solutions.
• Support Windows 10/11 migrations, deployments, task sequences, PXE, WDS, MDT, Windows ADK, WinPE, USMT, boot images, OS images, and driver packages.
• Perform enterprise application packaging, testing, deployment, upgrades, supersedence, dependencies, and troubleshooting.
• Manage application deployment using MSI, EXE, MSIX, PowerShell, PSADT, and related enterprise deployment technologies.
• Administer WSUS and SCCM software update infrastructure.
• Manage desktop and server patching, including Microsoft and third-party patches.
• Review and test patches in staging environments before production deployment.
• Manage Patch Tuesday activities, pilot deployments, phased production rollouts, compliance monitoring, and remediation of failed deployments.
• Support third-party patch management and vulnerability remediation.
• Manage and troubleshoot Active Directory, Group Policy, DNS, DHCP, and Windows Server environments.
• Develop PowerShell scripts and automation for SCCM, AD, Intune, Azure, application deployment, remediation, reporting, and administrative tasks.
• Support cloud technologies including Microsoft Azure and AWS.
• Support virtualization technologies including VMware and Hyper-V.
• Troubleshoot complex Tier 3 issues involving servers, databases, Windows clients, applications, SCCM/Intune, deployments, patching, networking, and infrastructure.
• Develop and administer SCCM dashboards and reporting, including Power BI and SQL-based reporting.
• Support asset inventory and software licensing activities.
• Support endpoint security technologies including BitLocker, Microsoft Defender/CrowdStrike, and related security tools.
• Support Citrix, Microsoft 365, Azure, SailPoint, ServiceNow integration, and other enterprise technologies.
• Participate in infrastructure modernization, new technology evaluations, system upgrades, and enhancement initiatives.
• Follow ITIL-based processes for incident, problem, change, release, and production management.
• Prepare technical documentation, SOPs, process flows, test plans, and operational procedures.
• Provide regular status reporting on operational activities, project milestones, risks, issues, and action items.

• 7+ years of experience designing, engineering, implementing, and supporting Microsoft infrastructure and endpoint management solutions.
• 7+ years of enterprise-level System Center/MECM/SCCM and/or Microsoft endpoint engineering experience.
• Experience supporting large enterprise environments with 10,000+ users/endpoints and multiple sites or business units.
• Strong hands-on experience with:
• Microsoft MECM/SCCM
• Microsoft Intune
• Active Directory
• Group Policy
• Windows 10/11
• Windows Server
• OSD and OS Imaging
• Application Packaging and Deployment
• Patch Management
• WSUS
• PowerShell
• Experience with Windows desktop migrations and transformations, including MDT, OSD, application compatibility assessment, and Office migrations.
• Experience with Azure and/or other cloud technologies.
• Experience with VMware and/or Hyper-V.
• Strong enterprise troubleshooting and problem-solving capabilities.
• Experience with endpoint security technologies such as BitLocker and CrowdStrike/Defender.
• Strong understanding of network protocols, services, and infrastructure.
• Detailed understanding of ITIL processes.
• Excellent written, verbal, presentation, and interpersonal communication skills.
• Ability to independently prioritize and execute work in a fast-paced, high-pressure enterprise environment.

Preferred Qualifications

• Microsoft engineering certifications related to Windows, SCCM/MECM, Active Directory, or endpoint management.
• Experience with Azure Virtual Desktop (AVD) and Nerdio.
• Experience with Power BI and SQL/SSRS reporting.
• Experience with Microsoft 365, Exchange, SharePoint, and Microsoft Teams.
• Experience with Citrix or other desktop/application virtualization technologies.
• Experience with VMware ThinApp or similar application virtualization technologies.
• Experience with third-party migration tools such as Quest/Dell Migration Manager (QMM).
• Experience with Flexera and software licensing/inventory.
• Experience with OMS/SCOM or other System Center products.
• Experience with scripting and automation for application packaging and infrastructure management.
• Familiarity with SailPoint, TOAD, MQ Series, ETL tools, or other enterprise middleware technologies.
• Experience with ServiceNow integration and enterprise workflow automation.