MECM Patching and Packaging Engineer

CACI•Chantilly, VA

10h•Hybrid

About The Position

CACI is looking for a skilled Microsoft Endpoint Configuration Manager (MECM, formerly SCCM) Packaging and Patching Engineer in support of the Department of the Air Force (DAF) Enterprise IT as a Service (EITaaS) program. The successful candidate will be responsible for overseeing the patch management process across our organization using Microsoft Endpoint Configuration Manager. This role requires in-depth knowledge of MECM, Windows operating systems, and best practices in patch management and security. On the EITaaS program, CACI will deliver enhanced capabilities and services to implement and operate an enterprise SIPR ITSM solution, enterprise service desk, endpoint management and security solution, as well as CONUS/OCONUS field support and life cycle support for end user devices to enable the DAF to transition focus from IT operations to mission operations. This position is hybrid with work expected in our Chantilly, VA office as needed.

Requirements

Must have Active Secret Clearance.
DoD 8140 compliant (ex: Security+)
10+ Years of relevant experience (Bachelor’s Degree in applicable field may be substituted for 5 years of experience).
In-depth knowledge of Windows operating systems and Microsoft update technologies.
Strong understanding of IT security principles and patch management best practices.
Experience with PowerShell scripting for automation of patching processes.
Familiarity with Windows Server Update Services (WSUS) and Microsoft Update Catalog.
Excellent analytical and problem-solving skills.
Strong communication abilities and experience working in cross-functional teams.
Excellent problem-solving and analytical skills.
Strong communication and team collaboration abilities.
Experience testing, deploying, and troubleshooting the installation of Microsoft and third-party software updates
Experience managing a large MECM infrastructure
Experience managing Windows Servers and Workstations
Familiarity with STIG requirements
Familiarity with ITILv4
Familiarity with Agile Scrum methodologies

Nice To Haves

Experience with ServiceNow
Experience with third-party patching solutions and vulnerability management tools.
Knowledge of cloud-based patching solutions (e.g., Microsoft Intune).
Familiarity with compliance standards such as HIPAA, PCI-DSS, or ISO 27001.
Familiarity with Agile methodologies.
Microsoft certifications related to MECM/SCCM and Windows Server strongly preferred.
Experience working in a DoD environment

Responsibilities

Develop, implement, and maintain a comprehensive patch management strategy using MECM.
Plan, schedule, and oversee the deployment of security updates, hotfixes, and service packs across the organization's IT infrastructure on the SIPR network to meet DAF mission requirement.
Manage the entire application patching lifecycle, while tracking all relevant SLA/SLRs and provide reports as required.
Create, test, and optimize patch deployment packages and task sequences.
Monitor patch compliance and generate reports for management and auditing purposes.
Troubleshoot complex patching issues and provide timely resolutions.
Collaborate with security teams to address vulnerabilities and ensure timely patching of critical systems.
Stay informed about the latest security threats, Microsoft updates, and industry best practices.
Develop and maintain documentation for patching processes, procedures, and policies.
Mentor and train team members on MECM patching best practices and techniques.
Participate in change management processes and ensure minimal disruption to business operations during patch deployments.
Establishing procedures based on industry best practices for both routine and zero-day patch management.
Deploy applications and application updates based on defined criteria.
Remediate issues related to failed patches or applications and conflicts related to patching.
Create documentation/SOPs for new procedures and manual steps to complete tasks for soft hand-offs and cross-training of support personnel.
Operate and maintain the overall MECM infrastructure supporting the enterprise.
Collaborate with DAF enterprise and program security teams to ensure requirements are met within allotted timeframes.
Communicate effectively and collaboratively with customers, stakeholders, and peers.