Microsoft Configuration Management Administrator; SCCM​/MECM and Intune) Alexandria, VA Posted

The Microsoft Configuration Management Administrator operates, monitors, and supports enterprise endpoint management services using Microsoft Configuration Manager (SCCM/MECM) while supporting the organization’s transition to Microsoft Intune and cloud-based endpoint management.

Performs day-to-day administration of application deployments, software updates, device collections, operating system deployment task sequences, configuration baselines, endpoint compliance, and vulnerability-remediation activities across enterprise Windows environments.

This position investigates and resolves endpoint-management issues using Configuration Manager tools, reports, client logs, endpoint diagnostics, Power Shell, and established support procedures. Administrator executes approved changes, patch deployments, software releases, remediation actions, and configuration updates in accordance with change-management, cybersecurity, and operational requirements.

Works closely with senior engineers, architects, cloud teams, cybersecurity personnel, service desk teams, and system owners to sustain existing endpoint-management services and support the migration of appropriate workloads to Microsoft Intune and other cloud-based capabilities.

Administrator also maintains technical documentation, deployment records, operating procedures, and configuration information required to support service continuity, auditability, security compliance, and reliable operations.

• Administer and support Microsoft Configuration Manager (SCCM/MECM), including application deployment, software updates, device collections, task sequences, configuration baselines, inventory, reporting, and client troubleshooting.
• Package, test, deploy, maintain, and troubleshoot Windows applications across enterprise endpoints, including installation, detection, dependency, and removal requirements.
• Execute and monitor enterprise Windows patching and update deployments using software update groups, automatic deployment rules, maintenance windows, phased deployments, and compliance reporting.
• Support Windows operating system deployment and provisioning, including task sequences, PXE and boot media, driver management, imaging, application sequencing, and deployment troubleshooting.
• Create and maintain device collections, configuration items, and compliance baselines to support targeted deployments, detect configuration drift, measure compliance, and enable approved remediation.
• Troubleshoot endpoint-management issues using Configuration Manager logs, Event Viewer, CMPivot, console monitoring, client diagnostics, reporting tools, Power Shell, and related administrative utilities.
• Support Active Directory, Microsoft Entra , Group Policy, device registration, endpoint identity management, and related Windows device lifecycle activities.
• Coordinate with cybersecurity personnel to remediate endpoint vulnerabilities, implement security configurations, monitor compliance, and support Microsoft Defender for Endpoint and related security controls.
• Support Microsoft Intune and co-management capabilities, including device enrollment, application deployment, compliance policies, configuration profiles, update rings, Windows Autopilot, and the phased migration of workloads from SCCM/MECM to cloud management.
• Use Power Shell and related scripting tools to automate routine endpoint-administration, reporting, remediation, and support activities while maintaining required change records, procedures, and technical documentation.

• Active Secret security clearance.
• Bachelor’s degree in information technology, computer science, cybersecurity, information systems, or a related field. Significant and relevant endpoint-management, desktop engineering, or…