Senior Windows MECM Engineer

• MECM Infrastructure Installation & Architecture: Direct, hands-on responsibility for designing, planning, installing, and configuring MECM primary site servers, secondary sites, distribution points, and software update points. Architect boundary groups, active directory discovery methods, and database replication schemes to handle low-bandwidth, disconnected, or afloat network topologies.

• Sustainment & Patch Management: Build, maintain, and sustain the MECM infrastructure through regular lifecycle upgrades, in-console hotfixes, and database indexing. Execute global monthly patch deployments to secure shore and afloat systems (Windows Server 2016/2019/2022 and Windows Client 10/11) against vulnerabilities.

• Operating System Deployment (OSD): Create, customize, and maintain end-to-end Windows 10/11 operating system deployment (OSD) task sequences, driver integration packages, and boot images.

• Application Packaging & Distribution: Package, test, and distribute commercial-off-the-shelf (COTS) and government-off-the-shelf (GOTS) software deployments using MSI, silent install parameters, and advanced scripting techniques.

• Security & STIG Compliance: Implement and enforce DISA Security Technical Implementation Guides (STIGs) across the MECM hierarchy and client systems. Utilize MECM Configuration Items (CIs) and Baselines to monitor and automatically remediate compliance drifts.

• Asset Intelligence & Reporting: Design custom SQL queries and SQL Server Reporting Services (SSRS) dashboards to provide leadership with real-time visibility into software licensing, hardware asset inventory, and cyber compliance reporting.

• Dedicated MECM Expertise: Minimum of 5 years of direct, hands-on engineering experience explicitly focused on Microsoft Endpoint Configuration Manager (MECM) / System Center Configuration Manager (SCCM), encompassing site system installation, database management, and infrastructure sustainment.
• Scripting Proficiency: Deep hands-on experience utilizing PowerShell and VBScript to automate administrative tasks, handle bulk client installations, and create dynamic detection methods.
• Network & Directory Services: Advanced working knowledge of Active Directory (Group Policy Objects, Organizational Units, Sites, and Services), DNS, DHCP, and subnets as they relate to MECM boundary groups and client discovery.
• Server & Database Knowledge: Practical experience with Microsoft SQL Server administration, SQL database backup/recovery routines, and writing customized relational database queries.

Required Clearance and Certifications:

• Active Secret security clearance

• Active CompTIA Security+ CE or equivalent cybersecurity credential

The anticipated salary range for this role is $90,000 to $107,000 annually. The anticipated salary range for this position is provided in accordance with applicable pay transparency laws. The final starting salary will be determined based on a variety of job-related factors, including the selected candidate’s qualifications, skills, relevant experience, education, certifications, and work location (where applicable), as well as internal equity and market considerations.