MECM Engineer (Senior) with Security Clearance

CJ FTE - Must be willing to work hybrid schedule for onsite (DC) and remote capabilities. Required Clearance: * Must have the ability to obtain Top Secret (We will assist, you have to be able to be cleared) XMS is seeking a Microsoft Endpoint Management Engineer with hands-on experience in configuring, operating, and maintaining a large enterprise infrastructure to deliver, update, and patch software applications. The endpoint management infrastructure consists of MS Configuration Manager (MECM), WSUS, Intune, and Azure Arc. The candidate will be part of team responsible for delivering software updates and patches as well as providing Tier 3 support to system administrators and end users. Responsibilities include: * Configure, monitor, and troubleshoot MECM related infrastructures and services. * Installing, configuring, monitoring, and troubleshooting MECM and associated SQL instances. * Use T-SQL to create reporting on MECM status and performance. * Installing, configuring, and troubleshooting WSUS servers. * Managing and maintaining physical hardware and associated networking components. * Configure, operate and maintain MS Delivery Optimization (DO) and MS Connected Cache (MCC) * Creating and managing GPOs; creating and managing associated objects in Active Directory. * Configure, monitor, and troubleshoot Microsoft cloud-based endpoint management solutions * Intune for end user devices * Azure Arc for on-premises and cloud-based servers * Creating scripts using PowerShell to perform tasks related to endpoint management * Support CyberSecurity and Incident Response related packaging and deployment efforts. * Learn and master new software platforms and frameworks * Create, review, and modify detailed architecture, standards, design documentation Required Education & Experience * 3 to 5 years of experience with SCCM/MECM, WSUS, T-SQL, and system management of Windows-based OS. * 3 to 5 years of experience with patch management experience with Microsoft products, i.e. Windows Update Agent, Microsoft Entra, and WSUS. * Experience managing devices with Intune and other Microsoft cloud technologies * Scripting/programming skills (PowerShell, C#, VBScript) * GPO administration and Active Directory experience. * Strong working knowledge of Windows Servers, DNS, networking fundamentals, network security zones, and tiered security models * Ability to troubleshoot event logs, errors codes, and typical configuration issues with Windows based software * Excellent writing and communication skills, including proven experience effectively communicating technical challenges and solutions to peers, customers and senior management Desired Experience/Skills/Attributes * Relevant Microsoft certifications (Desired) * Experience working in Microsoft cloud (Entra/Azure) * Working knowledge of foundational security principles related to identity including PKI, cryptography, RBAC, zero trust, PAM * Excellent interpersonal and team skills. * Strong writing skills.

Location: Springfield, Virginia, US

Posted Date: 10/19/2025