SCCM Administrator

SCCM Administrator

We're looking for an experienced SCCM (Security Center Configuration Manager) Administrator to manage our endpoint infrastructure — spanning SCCM, Group Policy, Microsoft Intune, and third-party patch management tooling (Patch My PC). You'll own day-to-day administration of our Configuration Manager environment, drive governance and cleanup of our GPO landscape, and lead application deployment and co-management efforts through Intune. This role suits someone who's comfortable owning complex, multi-system environments and bringing order to them.

· Administer, deploy, and maintain SCCM infrastructure supporting software distribution, patch management, and endpoint security

· Build and maintain packages, applications, collections, and deployments

· Manage client health — troubleshooting agent issues, re-installs, and discovery/push methods

· Administer Software Update Point (SUP)/WSUS, including sync troubleshooting and Automatic Deployment Rule (ADR) management

· Own monthly Patch Tuesday cadence, including third-party patching via Patch My PC

· Manage Distribution Points and content distribution, monitoring for failures and DP health

· Configure and maintain boundaries/boundary groups for correct client site assignment and content routing

· Support OS Deployment (OSD) — task sequences for imaging/re-imaging and driver package management

· Use CMPivot for real-time device queries and rapid troubleshooting

· Configure maintenance windows and client settings

· Monitor system health and troubleshoot issues to ensure optimal performance

· Develop reports on deployment status, patch compliance, and hardware inventory

· Design, implement, and manage GPOs enforcing security baselines and configuration standards across the domain

· Inventory existing GPOs, map each to its business/technical purpose, and consolidate overlapping or deprecated policies into standardized baselines (Core, Security, Browsers, Office, Remote Access)

· Diagnose and resolve policy conflicts, replication issues, and slow processing using RSoP, GPResult, and Event Viewer

· Optimize GPO performance (link order, enforcement, WMI filters, item-level targeting)

· Establish governance and change control — test OU, approval workflow, rollback plans — and maintain documentation for audit and knowledge transfer

· Enroll and configure workstations for co-management between SCCM and Intune, including Windows Autopilot deployment

· Package, deploy, and monitor applications; manage Company Portal experience and troubleshoot enrollment issues

· Maintain compliance and configuration policies, including Bit Locker management and app protection (MAM) policies

· Coordinate with Conditional Access policies to ensure compliance status supports access requirements

· Partner with other IT teams to integrate SCCM, GPO, Intune, and patch management tooling with broader infrastructure

· Enforce security best practices across all platforms

· Serve as a technical resource for other IT staff on SCCM/GPO/Intune matters

· Support software licensing and compliance reporting using SCCM inventory data as needed

· Keep current with platform updates and industry best practices

· Bachelor's degree in Computer Information Systems, Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.

· 5+ years administering SCCM in an enterprise environment

· Hands-on experience designing and troubleshooting GPOs in a multi-domain/multi-OU AD environment, including diagnosing conflicts and performance issues via RSoP, GPResult, and Event Viewer

· Strong knowledge of Windows Server, Active Directory, and core networking concepts

· Power Shell scripting experience, particularly for GPO…