Microsoft Endpoint Configuration Manager; MECM) Subject Matter Expert; SME) and Team Lead

Leidos Digital Modernization Sector is seeking an experienced, hands‑on Microsoft Endpoint Configuration Manager (MECM) Subject Matter Expert (SME) and Team Lead to support DISA J-6/J-9 operations in the National Capital Region in Arlington, VA.

The selected candidate will lead a team of MECM administrators responsible for enterprise endpoint management, vulnerability remediation, patching, operating system imaging, application deployment, and infrastructure sustainment across classified and unclassified networks. This position requires strong technical leadership, advanced MECM expertise, and the ability to collaborate with cybersecurity teams, infrastructure personnel, and government stakeholders to ensure operational readiness and compliance with DoD security requirements.

Clearance:
Top Secret at time of consideration

• Technical Leadership: Lead and mentor MECM administrators, oversee daily operations, establish technical standards, and resolve complex enterprise endpoint management issues.
• Vulnerability Remediation & Patching: Manage enterprise software updates, security patching, and vulnerability remediation using MECM. Ensure compliance with DISA STIGs, IAVMs, CTOs, FRAGOs, and other cybersecurity requirements.
• Cybersecurity Compliance: Coordinate with Cyber Compliance, DCO, and infrastructure teams to validate remediation efforts using MECM, ACAS/Tenable, and Trellix. Support RMF, POA&M tracking, audits, and compliance reporting.
• Operating System & Application Deployment: Develop and maintain Windows imaging solutions, MECM task sequences, PXE services, application packaging, software deployments, and operating system upgrades.
• MECM Infrastructure Management: Administer and troubleshoot MECM infrastructure, including site servers, distribution points, WSUS/SUP, SQL Server, Active Directory, Group Policy, and related enterprise technologies.
• Automation & Reporting: Utilize Power Shell, MECM compliance baselines, and reporting tools to automate deployments, improve endpoint health, and track vulnerability remediation and system performance.
• Operational Support & Coordination: Lead troubleshooting, root-cause analysis, infrastructure upgrades, and service recovery efforts. Coordinate technical activities and provide updates to DISA leadership and government stakeholders.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or an equivalent combination of education and experience.
• Minimum of 7 years of recent, hands‑on enterprise Microsoft Endpoint Configuration Manager (MECM/SCCM) experience at the Subject Matter Expert (SME) level
  , including advanced administration, troubleshooting, software deployment, patch management, and endpoint configuration.
• Demonstrated experience leading teams of System Administrators and/or Engineers
  , including providing technical direction, mentoring personnel, managing priorities, and resolving complex enterprise technical issues.
• Hands‑on experience applying and implementing DoD Security Technical Implementation Guide (STIG) mitigations
  , including identifying security findings, executing remediation actions, and validating compliance across enterprise Windows environments.
• U.S. Citizenship with an active Top Secret clearance or higher
  , and the ability to access NIPRNet and SIPRNet environments.
• Must meet DoD 8570/8140 IAT Level II certification requirements (Security+ CE, CySA+, GSEC, or equivalent) prior to starting, along with an appropriate Microsoft Computing Environment certification.
• Advanced knowledge of MECM architecture, software update management, application deployment, Windows imaging, task sequences, vulnerability remediation, and…