nMicrosoft Endpoint Configuration Manager

• Technical Leadership: Lead and mentor MECM administrators, oversee daily operations, establish technical standards, and resolve complex enterprise endpoint management issues.\n
• Vulnerability Remediation & Patching: Manage enterprise software updates, security patching, and vulnerability remediation using MECM. Ensure compliance with DISA STIGs, IAVMs, CTOs, FRAGOs, and other cybersecurity requirements.\n
• Cybersecurity Compliance: Coordinate with Cyber Compliance, DCO, and infrastructure teams to validate remediation efforts using MECM, ACAS/Tenable, and Trellix. Support RMF, POA&M tracking, audits, and compliance reporting.\n
• Operating System & Application Deployment: Develop and maintain Windows imaging solutions, MECM task sequences, PXE services, application packaging, software deployments, and operating system upgrades.\n
• MECM Infrastructure Management: Administer and troubleshoot MECM infrastructure, including site servers, distribution points, WSUS/SUP, SQL Server, Active Directory, Group Policy, and related enterprise technologies.\n
• Automation & Reporting: Utilize PowerShell, MECM compliance baselines, and reporting tools to automate deployments, improve endpoint health, and track vulnerability remediation and system performance.\n
• Operational Support & Coordination: Lead troubleshooting, root-cause analysis, infrastructure upgrades, and service recovery efforts. Coordinate technical activities and provide updates to DISA leadership and government stakeholders.\n

The selected candidate will lead a team of MECM administrators responsible for enterprise endpoint management, vulnerability remediation, patching, operating system imaging, application deployment, and infrastructure sustainment across classified and unclassified networks. This position requires strong technical leadership, advanced MECM expertise, and the ability to collaborate with cybersecurity teams, infrastructure personnel, and government stakeholders to ensure operational readiness and compliance with DoD security requirements.\n, * Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or an equivalent combination of education and experience.\n

• Minimum of 7 years of recent, hands-on enterprise Microsoft Endpoint Configuration Manager (MECM/SCCM) experience at the Subject Matter Expert (SME) level, including advanced administration, troubleshooting, software deployment, patch management, and endpoint configuration.\n
• Demonstrated experience leading teams of System Administrators and/or Engineers, including providing technical direction, mentoring personnel, managing priorities, and resolving complex enterprise technical issues.\n
• Hands-on experience applying and implementing DoD Security Technical Implementation Guide (STIG) mitigations, including identifying security findings, executing remediation actions, and validating compliance across enterprise Windows environments.\n
• U.S. Citizenship with an active Top Secret clearance or higher, and the ability to access NIPRNet and SIPRNet environments.\n
• Must meet DoD 8570/8140 IAT Level II certification requirements (Security+ CE, CySA+, GSEC, or equivalent) prior to starting, along with an appropriate Microsoft Computing Environment certification.\n
• Advanced knowledge of MECM architecture, software update management, application deployment, Windows imaging, task sequences, vulnerability remediation, and compliance management.\n
• Experience supporting DoD cybersecurity requirements, including IAVMs, CTOs, FRAGOs, and mandated remediation timelines.\n
• Strong working knowledge of MECM infrastructure, Windows Server, WSUS/SUP, SQL Server, Active Directory, Group Policy, and PKI.\n
• Proficiency with PowerShell scripting, automation, and MECM compliance reporting using SQL, SSRS, Power BI, or similar tools.\n
• Experience with ACAS/Tenable, Trellix, or comparable cybersecurity tools, along with knowledge of RMF and POA&M processes.\n
• Strong technical troubleshooting, communication, documentation, and customer engagement skills.\n
• Must reside in the Washington, DC metropolitan area, possess reliable transportation, and be available to work 100% onsite at designated DISA facilities, including the Pentagon, Crystal Gateway, Taylor Building, or Mark Center.\n, * Advanced experience with MECM software updates, WSUS, Automated Deployment Rules (ADRs), phased deployments, and enterprise patch management.\n
• Strong troubleshooting experience with MECM infrastructure and endpoints using PowerShell, CMTrace, WMI, system logs, and diagnostic tools.\n
• Working knowledge of SQL Server, MECM databases, SQL/WQL queries, CMPivot, and reporting tools such as SSRS.\n
• Experience with Microsoft Intune, Entra ID, and MECM/Intune co-management in hybrid enterprise environments.\n
• Experience supporting large-scale DoD environments, cybersecurity compliance, infrastructure modernization, and mission-critical endpoint operations.\n