Microsoft Endpoint Configuration Manager (MECM)

Leidos•Odenton, MD

7d•$73,450 - $132,775•Hybrid

About The Position

Leidos is seeking a highly skilled MECM System Administrator / Tier 3 Engineer to support the Defense Enclave Services (DES) program. This critical DISA-led initiative consolidates and modernizes IT services across the DoD Fourth Estate Agencies. The role requires a technically advanced engineer with deep Microsoft Endpoint Configuration Manager (MECM/SCCM) expertise, strong systems engineering experience, and a proactive operational mindset. This role supports enterprise endpoint management, software deployment, patch management, automation, and advanced troubleshooting within a large-scale, mission-critical environment. The Defense Enclave Services (DES) contract consolidates the DoD Fourth Estate Defense Agencies and Field Activities’ common-use IT systems, personnel, functions, and program elements under the direction of DISA’s Fourth Estate Network Optimization (4ENO) program office. DES delivers secure, standardized, and modernized enterprise IT services supporting critical national defense missions.

Requirements

Bachelor’s degree with 8+ years of relevant experience; additional years of directly related experience may be considered in lieu of degree.
Active Secret security clearance required.
Active CompTIA Security+ CE certification required (DoD 8570 compliant).
5+ years of hands-on enterprise experience administering Microsoft Endpoint Configuration Manager (MECM/SCCM).
Strong experience with: Software deployment and application packaging
Patch management and WSUS/SUP administration
Operating System Deployment (OSD)
Client health remediation
Endpoint compliance management
MECM infrastructure administration
Advanced PowerShell scripting and automation experience.
Experience troubleshooting enterprise-scale infrastructure and endpoint management issues in complex environments.
Strong knowledge of Windows Server, Windows 10/11 administration, Group Policy, Active Directory, DNS, DHCP, and enterprise endpoint management technologies.
Experience supporting virtualized environments (VMware and/or Hyper-V).
Working knowledge of ITIL processes including Incident, Problem, Change, and Configuration Management.
Demonstrated ability to perform root cause analysis and resolve highly complex technical issues independently.
Strong written and verbal communication skills with the ability to communicate technical concepts to both technical and non-technical audiences.
Ability to work effectively in a fast-paced, mission-critical operational environment.

Nice To Haves

Microsoft certifications related to MECM, Endpoint Management, Azure, or Windows Server administration.
Experience with Microsoft Intune, Co-Management, Autopilot, and modern endpoint management solutions.
Experience supporting large DoD enterprise environments.
Familiarity with DISA STIG compliance and DoD cybersecurity requirements.
Experience with enterprise monitoring and reporting tools.
Knowledge of cloud-based endpoint management technologies and hybrid environments.
Experience leading engineering efforts, technical projects, or operational improvement initiatives.

Responsibilities

Serve as a Tier 3 escalation engineer for MECM/SCCM infrastructure, endpoint management, and enterprise systems support.
Engineer, administer, maintain, and optimize Microsoft Endpoint Configuration Manager (MECM/SCCM) infrastructure in a large-scale enterprise environment.
Design, test, deploy, and validate enterprise software deployments, operating system deployments (OSD), application packaging, and patch management solutions using MECM.
Manage and maintain endpoint patching operations for servers and workstations, ensuring compliance with organizational security and operational standards.
Troubleshoot and resolve complex MECM infrastructure issues involving client health, content distribution, software deployments, boundary groups, distribution points, management points, SUP/WSUS integration, and collection performance.
Develop and implement automation solutions using PowerShell and other scripting technologies to improve operational efficiency, compliance, and system reliability.
Perform advanced troubleshooting of endpoint management issues in both physical and virtualized environments.
Monitor and maintain MECM client health across enterprise systems and optimize collection management to minimize evaluation and deployment latency.
Support enterprise operating system deployment (OSD) task sequences, driver management, imaging processes, and endpoint provisioning activities.
Collaborate with cybersecurity, infrastructure, server, networking, and engineering teams to support enterprise modernization initiatives and ensure compliance with security requirements.
Support incident, problem, change, and configuration management processes in accordance with ITIL best practices.
Conduct root cause analysis and develop corrective actions for recurring infrastructure and endpoint management issues.
Provide technical leadership, engineering guidance, and mentoring to junior administrators and operational support personnel.
Create and maintain technical documentation, standard operating procedures (SOPs), engineering diagrams, deployment processes, and knowledge articles.
Participate in architecture discussions, technology evaluations, and strategic planning efforts related to endpoint management and systems administration.
Coordinate with customers, stakeholders, and program leadership to gather requirements, communicate technical findings, and implement enterprise solutions.
Support after-hours maintenance windows, patch cycles, and operational activities as required.