SCCM Administrator

Role Summary

As an I&O Engineering Consultant or Senior I O Engineering Consultant, you will deliver reliable and secure device management services in a Dual UEM environment built on Microsoft Endpoint Configuration Manager (MECM/SCCM) and Microsoft Intune. You will own day-to-day endpoint engineering and operational outcomes such as OS and patch compliance, client health, vulnerability remediation, and endpoint configuration. The role is execution-focused with strong troubleshooting depth and disciplined ITSM practices utilizing both on-premise server infrastructure as well as cloud services through Microsoft Entra. As necessary, you will routinely participate in major incident bridges/war rooms, ensuring service restoration within agreed SLAs and contributing to measurable MTTR reduction. You will also contribute to AI adoption by proposing and piloting practical ideations (e.g., ticket triage assist, automated log parsing, runbook generation) to improve reliability, speed, and user experience, while adhering to organizational security, privacy, and data handling standards.

Primary Responsibilities

• Patching, Vulnerability Remediation & Compliance
• Operate software update and patching operations via SCCM (ADRs, maintenance windows, deployment schedules, compliance reporting) and coordinate exception handling.
• Track and improve patch compliance posture across the endpoint estate; identify and remediate non-compliant devices; support compliance dashboards and executive reporting.
• Drive client health compliance. Monitor and remediate endpoint SCCM/Intune client health, enrollment success, policy/app deployment success, and content distribution health.
• Platform Engineering & Operations, Application Support
• Administer SCCM components (collections, boundaries, deployments, content distribution, client health monitoring, reporting).
• Administer Intune capabilities (enrollment, configuration profiles, compliance policies, app assignments, RBAC) and support coexistence with SCCM.
• Monitor platform health and availability: enrollment success, policy/app success rates, client health, content distribution health, and remediation backlogs.
• Drive device inventory accuracy and operational hygiene; perform routine health checks and standard validations.

• Application Lifecycle, OS Servicing & Operations
• Support SCCM OS deployment and servicing (OSD, Task Sequences, feature updates, in-place upgrades), driver/BIOS packaging coordination, and rollback plans.
• Execute post-deployment validation and remediation for failed installs, policy conflicts, and provisioning issues.
• Strong understanding of packaging and deployment of applications (MSI/EXE/MSIX/Win32) using SCCM/Intune using detection methods, dependencies, supersedence, and phased ring deployments.
• Troubleshooting, ITSM & War Rooms
• Troubleshoot endpoint deployment and client issues using logs and diagnostics (e.g., AppEnforce/AppDiscovery, WUAHandler, CAS, CCMExec).
• Work within ITSM processes (Incident/Problem/Change) including change documentation, risk assessment, and post-change validation.
• Participate in major incident war rooms/bridges; provide technical inputs, implement mitigations, and document restoration actions.
• Track and drive SLA adherence; contribute to MTTR reduction via faster triage, known error documentation, and repeat-incident prevention.
• Automation & AI Adoption / Ideation
• Create and maintain PowerShell-based operational automations (health checks, compliance reporting, remediation scripts).
• Propose AI-assisted improvements (e.g., Copilot-assisted draft runbooks, KB articles, ticket summarization, and log pattern identification).
• Pilot small-scale AI/automation ideations with measurable success criteria (time saved, reduced rework, improved compliance).
• Ensure AI usage adheres to organizational security, privacy, and data handling policies (no sensitive data leakage).

• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regard to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so.

Required Qualifications:

• 6+ years of hands-on administrative experience using SCCM
• 3+ years of hands-on administrative experience using Intune
• Operations, Health and Availability experience
• Health monitoring and remediation: client health, enrollment success, policy/app deployment success, content distribution health
• Service reliability ownership: stability, availability, and operational hygiene
• Patching and Vulnerability Operations experience
• MECM patching operations: ADRs, deployment rings, maintenance windows, compliance reporting
• Vulnerability remediation support: execute remediation plans and validate compliance within required timelines
• Automation and Scripting experience
• PowerShell scripting for automation and remediation; familiarity with scheduled tasks and basic safe rollout practices
• Ability to create repeatable runbooks and operational checklists
• ITSM and Operational Excellence
• Experience working in war rooms and providing concise technical updates for rapid restoration
• Working knowledge of Incident/Problem/Change management; ability to write clear change plans and validation steps
• Ownership mindset for SLA adherence and MTTR reduction
• Proven Core Technical Skills (Primary)
• Omnissa Workspace ONE UEM: 1+ years; administrative depth (profiles, Smart Groups, app distribution, compliance policies, device troubleshooting)
• MECM/SCCM: application model, collections, deployments, boundaries, content distribution, client health, reporting
• Microsoft Intune: enrollment methods, configuration/compliance policies, Win32 app deployment, troubleshooting, RBAC
• Dual UEM operations: support coexistence, minimize policy conflicts, and ensure consistent end-user experience
• Proven AI Adoption and Continuous Improvement
• Comfort using approved AI tools to accelerate documentation, analysis, and knowledge management
• Ability to identify repetitive tasks suitable for automation or AI assistance and propose improvements

Preferred Qualifications:

• Bachelor's degree in Engineering/Computer Science or equivalent experience.
• Preferred: ITIL Foundation, Microsoft endpoint-related certifications, Workspace ONE training/certification.
• 2+ years of hands-on administrative experience with Omnissa Workspace ONE UEM (formerly AirWatch).

Success Measures (Examples)

• Endpoint platform health and availability maintained with sustained reduction in unhealthy clients/devices
• Patch compliance and vulnerability remediation achieved within agreed windows; improved deployment success rates
• Reduced repeat incidents through better RCA documentation, known error articles, and proactive remediation