Microsoft Endpoint Configuration Manager (MECM) Subject Matter Expert (SME) and Team Lead

Leidos•The Pentagon, VA

22d•Onsite

About The Position

Leidos Digital Modernization Sector is seeking an experienced, hands-on MECM Subject Matter Expert and Team Lead to support DISA J-6/J-9 operations in the National Capital Region. The position leads MECM administrators responsible for enterprise endpoint management, vulnerability remediation, patching, operating system imaging, application deployment, and infrastructure sustainment across classified and unclassified networks. It requires technical leadership, advanced MECM expertise, and collaboration with cybersecurity teams, infrastructure personnel, and government stakeholders to support operational readiness and compliance with DoD security requirements. The role is 100% onsite at designated DISA facilities, including the Pentagon, Crystal Gateway, Taylor Building, or Mark Center. The candidate must reside in the Washington, DC metropolitan area, have reliable transportation, be a U.S. citizen, and hold an active Top Secret clearance or higher at time of consideration. The position requires at least seven years of recent, hands-on enterprise MECM/SCCM experience, team leadership experience, DoD STIG implementation experience, and the required DoD 8570/8140 IAT Level II and Microsoft Computing Environment certifications before starting. The listed pay range is $92,300.00–$166,850.00. The posting states that this range is a general guideline and not a guarantee of compensation.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or an equivalent combination of education and experience.
At least 7 years of recent, hands-on enterprise MECM/SCCM experience at the SME level, including advanced administration, troubleshooting, software deployment, patch management, and endpoint configuration.
Demonstrated experience leading teams of System Administrators and/or Engineers, including technical direction, mentoring, priority management, and resolution of complex technical issues.
Hands-on experience applying DoD STIG mitigations, including identifying security findings, performing remediation, and validating compliance across enterprise Windows environments.
U.S. citizenship and an active Top Secret clearance or higher, with the ability to access NIPRNet and SIPRNet environments.
DoD 8570/8140 IAT Level II certification (such as Security+ CE, CySA+, GSEC, or equivalent) before starting, along with an appropriate Microsoft Computing Environment certification.
Advanced knowledge of MECM architecture, software update management, application deployment, Windows imaging, task sequences, vulnerability remediation, and compliance management.
Experience supporting DoD cybersecurity requirements, including IAVMs, CTOs, FRAGOs, and mandated remediation timelines.
Strong working knowledge of MECM infrastructure, Windows Server, WSUS/SUP, SQL Server, Active Directory, Group Policy, and PKI.
Proficiency with PowerShell scripting, automation, and MECM compliance reporting using SQL, SSRS, Power BI, or similar tools.
Experience with ACAS/Tenable, Trellix, or comparable cybersecurity tools, and knowledge of RMF and POA&M processes.
Strong technical troubleshooting, communication, documentation, and customer engagement skills.
Must reside in the Washington, DC metropolitan area, possess reliable transportation, and be available to work 100% onsite at designated DISA facilities.

Nice To Haves

Advanced experience with MECM software updates, WSUS, Automated Deployment Rules (ADRs), phased deployments, and enterprise patch management.
Strong troubleshooting experience with MECM infrastructure and endpoints using PowerShell, CMTrace, WMI, system logs, and diagnostic tools.
Working knowledge of SQL Server, MECM databases, SQL/WQL queries, CMPivot, and reporting tools such as SSRS.
Experience with Microsoft Intune, Entra ID, and MECM/Intune co-management in hybrid enterprise environments.
Experience supporting large-scale DoD environments, cybersecurity compliance, infrastructure modernization, and mission-critical endpoint operations.

Responsibilities

Lead and mentor MECM administrators, oversee daily operations, establish technical standards, and resolve complex enterprise endpoint management issues.
Manage enterprise software updates, security patching, and vulnerability remediation using MECM.
Ensure compliance with DISA STIGs, IAVMs, CTOs, FRAGOs, and other cybersecurity requirements.
Coordinate with Cyber Compliance, DCO, and infrastructure teams to validate remediation using MECM, ACAS/Tenable, and Trellix.
Support RMF, POA&M tracking, audits, and compliance reporting.
Develop and maintain Windows imaging solutions, MECM task sequences, PXE services, application packaging, software deployments, and operating system upgrades.
Administer and troubleshoot MECM infrastructure, including site servers, distribution points, WSUS/SUP, SQL Server, Active Directory, Group Policy, and related enterprise technologies.
Use PowerShell, MECM compliance baselines, and reporting tools to automate deployments, improve endpoint health, and track vulnerability remediation and system performance.
Lead troubleshooting, root-cause analysis, infrastructure upgrades, and service recovery efforts.
Coordinate technical activities and provide updates to DISA leadership and government stakeholders.