Microsoft Endpoint Configuration Manager (MECM/SCCM) Administrator (Intermediate-Level)

Link Solutions, Inc.•Adelphi, MD

2h•$94,000 - $100,000•Onsite

About The Position

Link Solutions is seeking a Microsoft Endpoint Configuration Manager (MECM/SCCM) Administrator to join our team in Adelphi, MD. This role supports the Office of the Chief Information Officer Infrastructure and Operations Division (OCIO/I&O) and is responsible for the administration, maintenance, security, and optimization of Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, and Windows endpoint management services across classified and unclassified environments. The Administrator will manage enterprise endpoint management systems supporting Windows workstations, software deployment, operating system lifecycle management, patch management, compliance reporting, and endpoint security initiatives. The ideal candidate will possess extensive experience with MECM/SCCM administration, endpoint automation, software packaging, operating system deployment, and cybersecurity compliance in large enterprise environments. This role works closely with infrastructure, cybersecurity, networking, and server teams to ensure endpoint systems remain secure, compliant, and operationally effective. The successful candidate will help ensure the availability, integrity, and performance of enterprise endpoint services while supporting modernization efforts and cloud-based endpoint management initiatives.

Requirements

U.S. Citizen with an active DoD Secret Clearance.
DoD 8570/8140 IAT Level II certification or higher (Security+, CySA+, or equivalent).
Four (4+) years of experience administering Microsoft Endpoint Configuration Manager (MECM/SCCM) in a large enterprise environment.
Experience with Operating System Deployment (OSD), software packaging, application deployment, and patch management.
Experience managing Windows 10/11 enterprise endpoints.
Experience with Active Directory, Group Policy, DNS, DHCP, and enterprise Windows infrastructure.
Experience creating and maintaining PowerShell automation scripts.
Knowledge of DISA STIG compliance requirements and DoD cybersecurity regulations.
Experience utilizing vulnerability management tools such as ACAS and Nessus.
Baseline certification required within six (6) months of hire if not already obtained.

Nice To Haves

Bachelor’s degree in computer science, Information Technology, IT Service Management, or a related technical discipline.
Strong knowledge of Microsoft technologies, including Windows PowerShell, Active Directory, Group Policy, and Microsoft 365 services.
Familiarity with vulnerability management and security assessment tools such as ACAS, Nessus, and Retina.
Experience providing enterprise application support.
Knowledge of backup, disaster recovery, and business continuity best practices.
Strong analytical, troubleshooting, and problem-solving abilities.
Ability to manage multiple priorities and work effectively in a fast-paced environment.
Excellent written and verbal communication skills.
Strong organizational skills and attention to detail.
Ability to work effectively with technical teams, customers, and all levels of management.

Responsibilities

Administer, configure, maintain, and troubleshoot Microsoft Endpoint Configuration Manager (MECM/SCCM) infrastructure and associated endpoint management services.
Manage software deployment, application packaging, distribution points, collections, task sequences, and compliance baselines.
Administer and support Operating System Deployment (OSD), imaging processes, driver management, and Windows lifecycle management.
Deploy and maintain Windows security updates, third-party application patches, and vulnerability remediation activities using MECM.
Monitor MECM site health, component status, client health, content distribution, and overall platform performance.
Create and maintain collections, deployment packages, automatic deployment rules (ADRs), and software update groups.
Implement and support endpoint compliance initiatives in accordance with DoD, DISA STIG, and cybersecurity requirements.
Develop automation solutions using PowerShell to streamline endpoint management, reporting, software deployments, and operational tasks.
Generate and maintain compliance, patching, inventory, and asset management reports utilizing MECM reporting services and SQL-based reporting tools.
Support co-management initiatives with Microsoft Intune and cloud-based endpoint management technologies.
Collaborate with cybersecurity teams to remediate vulnerabilities identified through ACAS, Nessus, and other compliance assessment tools.
Maintain endpoint security configurations through Group Policy, configuration baselines, and security policies.
Develop and maintain technical documentation, SOPs, implementation guides, and operational procedures.
Provide Tier III support for endpoint management issues and serve as a technical escalation point for desktop engineering and systems support teams.
Participate in infrastructure modernization efforts, endpoint transformation initiatives, and cloud migration projects.