Microsoft Endpoint Configuration Manager; MECM) Subject Matter Expert; SME) and Team Lead

• Technical Leadership: Lead and mentor MECM administrators, oversee daily operations, establish technical standards, and resolve complex enterprise endpoint management issues.
• Vulnerability Remediation & Patching: Manage enterprise software updates, security patching, and vulnerability remediation using MECM. Ensure compliance with DISA STIGs, IAVMs, CTOs, FRAGOs, and other cybersecurity requirements.
• Cybersecurity Compliance: Coordinate with Cyber Compliance, DCO, and infrastructure teams to validate remediation efforts using MECM, ACAS/Tenable, and Trellix. Support RMF, POA&M tracking, audits, and compliance reporting.
• Operating System & Application Deployment: Develop and maintain Windows imaging solutions, MECM task sequences, PXE services, application packaging, software deployments, and operating system upgrades.
• MECM Infrastructure Management: Administer and troubleshoot MECM infrastructure, including site servers, distribution points, WSUS/SUP, SQL Server, Active Directory, Group Policy, and related enterprise technologies.
• Automation & Reporting: Utilize Power Shell, MECM compliance baselines, and reporting tools to automate deployments, improve endpoint health, and track vulnerability remediation and system performance.
• Operational Support & Coordination: Lead troubleshooting, root-cause analysis, infrastructure upgrades, and service recovery efforts. Coordinate technical activities and provide updates to DISA leadership and government stakeholders.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or an equivalent combination of education and experience.
• Minimum of 7 years of recent, hands-on enterprise Microsoft Endpoint Configuration Manager (MECM/SCCM) experience at the Subject Matter Expert (SME) level, including advanced administration, troubleshooting, software deployment, patch management, and endpoint configuration.
• Demonstrated experience leading teams of System Administrators and/or Engineers, including providing technical direction, mentoring personnel, managing priorities, and resolving complex enterprise technical issues.
• Hands-on experience applying and implementing DoD Security Technical Implementation Guide (STIG) mitigations, including identifying security findings, executing remediation actions, and validating compliance across enterprise Windows environments.
• U.S. Citizenship with an active Top Secret clearance or higher, and the ability to access NIPRNet and SIPRNet environments.
• Must meet DoD 8570/8140 IAT Level II certification requirements (Security+ CE, CySA+, GSEC, or equivalent) prior to starting, along with an appropriate Microsoft Computing Environment certification.
• Advanced knowledge of MECM architecture, software update management, application deployment, Windows imaging, task sequences, vulnerability remediation, and compliance management.
• Experience supporting DoD cybersecurity requirements, including IAVMs, CTOs, FRAGOs, and mandated remediation timelines.
• Strong working knowledge of MECM infrastructure, Windows Server, WSUS/SUP, SQL Server, Active Directory, Group Policy, and PKI.
• Proficiency with Power Shell scripting, automation, and MECM compliance reporting using SQL, SSRS, Power BI, or similar tools.
• Experience with ACAS/Tenable, Trellix, or comparable cybersecurity tools, along with knowledge of RMF and POA&M processes.
• Strong technical troubleshooting, communication, documentation, and customer engagement skills.
• Must reside in the Washington, DC metropolitan area, possess reliable transportation, and be available to work 100% onsite at designated DISA facilities, including the Pentagon, Crystal Gateway, Taylor Building, or Mark Center.

• Advanced experience with MECM software updates, WSUS, Automated Deployment Rules (ADRs), phased deployments, and enterprise patch management.
• Strong troubleshooting experience with MECM infrastructure and endpoints using Power Shell, CMTrace, WMI, system logs, and diagnostic tools.
• Working knowledge of SQL Server, MECM databases, SQL/WQL queries, CMPivot, and reporting tools such as SSRS.
• Experience with Microsoft Intune, Entra , and MECM/Intune co-management in hybrid enterprise environments.
• Experience supporting large-scale DoD environments, cybersecurity compliance, infrastructure modernization, and mission-critical endpoint operations.

Pay Range: $92,300.00 - $

Pay and Benefits:

Employment benefits include competitive…