MECM Systems Engineer

Leading with our people Digital Consultants mission is to deliver the highest level of professional solutions while being a trusted partner and advisor to our customers. With a culture of practicality opportunity and creativity we remain dedicated to being honest trustworthy respectful and ethical in everything we do. We are a certified SBA 8(a) small disadvantaged business that supports multiple IT customers within the Federal civilian and private sectors. Digital Consultants also offers our employees growth opportunities competitive wages and a full benefits package. Our founding principles Fairness and Common Sense make working here more than a job; we are a Digital family.

Digital Consultants is seeking a Microsoft Endpoint Configuration Manager (MECM/SCCM) Systems Engineer. This position serves as the primary technical authority for Microsoft Endpoint Configuration Manager (MECM/SCCM) within the organization ensuring reliable secure and efficient endpoint deployment and management. The engineer must maintain a holistic understanding of ConfigMgr operations as they intersect with Active Directory networking and Windows client systems to ensure cohesive enterprise management and compliance.

Duties to include:

• Manage on-premises Microsoft Endpoint Configuration Manager (ConfigMgr) infrastructure and services.
• Perform installation configuration and upgrades of ConfigMgr sites and roles (MP DP SUP etc.).
• Manage and troubleshoot client deployments software updates and OS deployments (task sequences PXE etc.).
• Administer application deployment and update delivery for enterprise endpoints.
• Perform patch management lifecycle tasks including compliance reporting and remediation.
• Integrate Configuration Manager with Active Directory and WSUS for unified policy and patch enforcement.
• Prepare for hybrid and future integration with Microsoft Intune and cloud-based services.

Supporting and Related Technical Skills:

Active Directory Integration:

• Strong understanding of how ConfigMgr leverages Active Directory for boundary groups client discovery authentication and policy targeting.
• Ability to troubleshoot AD System and User Discovery issues collection memberships and group-based deployments.
• Experience with managing service accounts computer objects and OU structure alignment with ConfigMgr operations.
• Knowledge of Group Policy Objects (GPOs) affecting ConfigMgr functionality such as WSUS and Windows Update configurations.

Windows Client Management (Windows 11 Focus):

• Deep knowledge of Windows 11 architecture servicing models and updating channels (e.g. SAC LTSC).
• Experience managing feature updates cumulative updates and quality updates through ConfigMgr.
• Understanding Windows Autopilot readiness driver injections and hardware abstraction for modern deployments.
• Ability to create and maintain Windows 11 compliance baselines and configuration items.
• Troubleshoot Windows client health WMI repository issues and agent-related errors.

Networking and Infrastructure Knowledge:

• Understanding of network topologies (LAN/WAN/VPN) and how they affect content distribution and PXE boot processes.
• Familiarity with boundaries boundary groups and Distribution Point placement for optimized client communication.
• Knowledge of HTTP/HTTPS client communication models certificate-based authentication and PKI integration.
• Ability to troubleshoot network-level issues affecting deployments including DNS resolution DHCP configurations and firewall exceptions.

Endpoint Manager Supporting Skills:

• Understanding of inventory and asset intelligence data collection and reporting.
• Familiarity with co-management and cloud attach scenarios between ConfigMgr and Intune.
• Experience with collection queries compliance settings and custom reporting through SQL Server Reporting Services (SSRS).
• Ability to document system configurations architecture diagrams and deployment workflows.
• Strong troubleshooting skills across client logs (CCM UpdatesDeployment WUAHandler CAS etc.) and site server logs.

Clearance: Secret

• Personnel initially must possess a final DoD granted Tier 3 clearance (Secret) with a submitted Tier 5 (Top Secret) investigation. Personnel must obtain a final Tier 5 clearance (Top Secret) with SCI eligibility or be replaced with Tier 5 cleared individual.

Education: High School Diploma/GED

Certifications: SEC and/or CISSP

• Requires a minimum of ten (10) years of progressive experience in systems engineering including extensive hands-on experience with Microsoft Endpoint Configuration Manager (MECM).
• Must possess good interpersonal communications and analytical skills
• Advanced knowledge of ConfigMgr infrastructure site hierarchy and database operations.
• Experience packaging deploying and maintaining enterprise software.
• Strong understanding of OSD (Operating System Deployment) driver management and task sequence design.
• PowerShell scripting expertise for automation of deployment client management and compliance reporting.
• Familiarity with WSUS MDT and Microsoft Update integration.
• Understanding of STIG compliance and its impact on MECM configuration and deployment workflows.

Desirable Experience:

• Knowledge of Microsoft Deployment Toolkit (MDT) for integration and task sequence enhancements.
• Experience with automation tools beyond PowerShell (e.g. Orchestrator Azure Automation or Power Automate).
• Familiarity with Windows Update for Business (WUfB) and integration readiness.
• Understanding of endpoint hardening compliance baselines and secure configuration practices.
• Working knowledge of SQL queries for troubleshooting and reporting within the ConfigMgr database.

Physical Requirements: The candidate must with or without reasonable accommodation be able to sit stand use computers and monitors and perform duties in an office environment for extended periods. The candidate must be able to lift up to 40 lbs. on occasion (e.g. move a case of paper or similar task).

Digital Consultants an inclusive and welcoming company is fully committed to hiring and retaining a diverse workforce without regard to race color religion sex (including pregnancy gender identity and sexual orientation) genetic information national origin age (40 or older) disability Veterans status or any other protected characteristic.

We provide reasonable accommodations to individuals who need assistance during any part of the employment process. If you need assistance navigating Digital Consultants job openings or applying for a position please send an email to or call . Please provide your contact information and let us know how we can assist you.