Role Overview
Lead the administration, optimization, and governance of Microsoft Endpoint Configuration Manager across a large-scale, highly regulated enterprise environment. The role focuses on endpoint compliance, operating system lifecycle management, software deployment, patching, platform health, and secure service delivery.
What You'll Do
You will own and enhance the MECM/SCCM service while partnering with infrastructure, security, workplace, server, application, and service-management teams. You will provide senior-level technical leadership, resolve complex platform issues, and ensure endpoint services remain reliable, secure, compliant, and audit-ready.
Key Responsibilities
-
Administer, maintain, and optimize enterprise Microsoft Endpoint Configuration Manager (MECM/SCCM) infrastructure.
-
Design and support operating system deployment solutions for Windows client and server platforms, including task sequences, boot images, driver packages, and OS images.
-
Plan and execute monthly security patching, software update deployments, and vulnerability-remediation activities.
-
Package, test, deploy, and troubleshoot enterprise applications using MECM and approved packaging frameworks.
-
Monitor site health and availability across Management Points, Distribution Points, Software Update Points, boundaries, boundary groups, and client communications.
-
Provide L3 troubleshooting for client health, content distribution, policy processing, patching, software deployment, and task-sequence failures.
-
Produce endpoint inventory, compliance, operational-health, and audit reports for technical and governance stakeholders.
-
Integrate MECM with Microsoft Intune and support co-management or modern endpoint-management initiatives where applicable.
-
Partner with security teams on endpoint security baselines and vulnerability-remediation activities using platforms such as Qualys and Microsoft Defender.
-
Develop and maintain PowerShell automation for administration, health checks, remediation, reporting, and operational efficiency.
-
Support endpoint lifecycle activities including provisioning, refresh, software distribution, configuration changes, and decommissioning.
-
Coordinate incidents, problems, changes, and service requests through ServiceNow and contribute to root-cause analysis and continual service improvement.
-
Maintain technical documentation, operating procedures, support models, platform standards, and recovery plans.
-
Provide technical guidance to administrators and coordinate delivery across geographically distributed teams.
What You Bring
You bring deep hands-on experience supporting enterprise endpoint-management platforms in environments where security, resilience, governance, and operational discipline are essential. You combine advanced MECM/SCCM expertise with strong troubleshooting, automation, documentation, and stakeholder-management capabilities.
Required Skills and Experience
-
Extensive experience administering Microsoft Endpoint Configuration Manager (MECM/SCCM) in a large enterprise environment.
-
Expert-level knowledge of MECM/SCCM architecture, client management, software distribution, operating system deployment, software updates, collections, reporting, and compliance.
-
Advanced troubleshooting experience across site systems, client health, content distribution, boundary groups, Management Points, Distribution Points, Software Update Points, and task sequences.
-
Strong PowerShell scripting skills for automation, reporting, diagnostics, and remediation.
-
Experience with Microsoft Intune, co-management, Microsoft Defender, Active Directory, Group Policy, WSUS, PKI certificates, DNS, and network fundamentals.
-
Experience with application packaging and deployment technologies such as MSI and PowerShell App Deployment Toolkit (PSADT), or equivalent frameworks.
-
Working knowledge of Windows Server infrastructure supporting MECM site systems.
-
Knowledge of endpoint security controls, vulnerability management, technical security standards, and audit evidence requirements.
-
Experience with enterprise platforms such as ServiceNow and Qualys.
-
Strong analytical, problem-solving, documentation, communication, and stakeholder-management skills.
-
Ability to work independently, prioritize competing demands, and maintain high quality under minimal supervision.
-
Experience in banking, financial services, or another highly regulated technology environment is strongly preferred.
Preferred Qualifications
-
Microsoft certification aligned to endpoint administration, Intune, Windows, or Microsoft 365.
-
ITIL Foundation or equivalent service-management certification.
-
Experience with hybrid endpoint environments, modern management, automation, and large-scale technology transformation.
-
Experience supporting globally distributed endpoint estates and cross-regional operations teams.
What Success Looks Like
-
A stable, secure, and well-governed MECM/SCCM platform with clear operational ownership.
-
Consistent patching, deployment, and compliance outcomes supported by accurate reporting and timely remediation.
-
Reduced manual effort through practical PowerShell automation and standardized operating procedures.
-
Effective collaboration across security, infrastructure, workplace, application, and service-management teams.