Job Summary

SCCM / MECM Engineer (L3) with Intune Knowledge

Key Responsibilities

Enterprise SCCM Platform Architecture (Global, Multi-Region) — Design, administer, and maintain a global SCCM/MECM Current Branch infrastructure spanning 1 Central Administration Site (with an Always-On High-Availability SQL Server Cluster) and 5 Primary Sites across EMEA (x2), APAC, NAFTA, and LATAM. Administer and troubleshoot the SQL Server Always-On Availability Group backing the Central Administration Site, including failover testing and performance tuning. Manage the 400+ tenant / 71 Smart Tenant multi-tenancy model, including tenant creation, updates, and decommissioning of stale tenants. Monitor and maintain the Cloud Management Gateway (CMG) and Cloud Connector linking the on-premise environment to the client\'s central Entra ID / Intune tenant, including certificate renewal (currently a biennial cycle). Operate SCOM (System Center Operations Manager) for infrastructure health and event monitoring. Maintain the automation and configuration environment behind SCCM: a SharePoint Server with Nintex workflows and a System Center Orchestrator server used for ConfigMgr configuration automation and object creation. Own IP-address and boundary management across ~4,000 IP boundaries; perform ongoing housekeeping (collection evaluation, cleanup, tenant validation). Client-Proprietary & Legacy Tooling (Mercedes-Benz Environment) — Operate, maintain, and where required extend the following tools as part of standard SCCM operations: NextSF (Next Script Framework), LaMa / LaMa Solution (local admin rights management, being succeeded by Windows LAPS), CoSyMa (Software Release Management & Application Deployment Tool), DynAppCo (application configuration), CoMobi (ConfigMgr onboarding from the SIT database), SIT / SIT@Web / Web SIT (packaging workflow — templates, conflict checks, SLA calculation, app onboarding to Intune), Software Release Creator (SCCM-based Task Sequence bundling), Software Update Deployment Creator (Maas Update Deployment configuration), System Center Updates Publisher (SCUP — legacy, unsupported), SoMaDS (application uninstallation), PADT (customized app deployment), BIOS Framework (BIOS/firmware update installation), SMS Mini/Proxy Web Service, Driver Web Service, Upload Web Service, DataBee (on-prem Power BI reporting solution, being migrated to cloud reporting), PC Info (local/central settings display tool), Zero Balancing scripts (AD/SCCM/Entra ID/Intune object consistency), WMI class/provider extensions, and Trellix Client Security (formerly McAfee FRP, used for file-share encryption). Maintain and evolve scripts implementing the User-Setting-Data-Management (USDM) concept — post-provisioning configuration of user home directories, standard user data folders, and roaming settings. Own source code and IP custody for SCCM-related automation scripts and tools in GitHub; document and version all changes under change management. SCCM / MECM Platform Administration Design, administer, and maintain SCCM/MECM infrastructure: Primary and Secondary Sites, Management Points, Distribution Points, Software Update Points, Reporting Services, Boundary Groups. Monitor platform health and performance; maintain client agent standards and compliance; troubleshoot SCCM infrastructure and client-related issues. Operating System Deployment (OSD) Design and maintain Windows deployment solutions: Task Sequences, Boot Images, Driver Management, OS Images, PXE Deployments. Support Windows 10/11 deployment and refresh programs; troubleshoot deployment failures and imaging issues; manage feature update deployment strategies. Software Distribution & Application Management Package and deploy enterprise applications using SCCM: MSI Packages, EXE Installations, PowerShell Deployments, Application Groups, Software Center Management. Manage software release processes and deployment governance; troubleshoot application deployment issues; support application lifecycle management. Patch & Update Management Administer Software Update Management

Skill Requirements

Microsoft Endpoint Management SCCM / MECM Current Branch Endpoint Configuration Manager Client Health Management Boundary & Boundary Group Administration Software Update Management Operating System Deployment Software Distribution Application Packaging Global Platform Architecture Multi-Region CAS / Primary Site Architecture (5-site global topology) SQL Server Always-On Availability Group Administration Cloud Management Gateway (CMG) & Cloud Connector Management SCOM (System Center Operations Manager) SharePoint / Nintex Workflow Administration System Center Orchestrator GitHub Source Control (script/tool IP custody) Client-Proprietary Tooling (Trained during onboarding) NextSF (Next Script Framework) LaMa Solution (local admin rights) CoSyMa (Software Release Mgmt) SIT / SIT@Web (packaging workflow) DynAppCo, CoMobi, SoMaDS, PADT (application config/deployment tools) DataBee (on-prem Power BI reporting) USDM (User-Setting-Data-Management) concept Modern Device Management Microsoft Intune Co-Management Cloud Attach Windows Autopilot Windows Autopatch Windows Update for Business (WUfB) Device Compliance Policies Device Configuration Profiles Identity & Security Active Directory Microsoft Entra ID Hybrid Join Group Policy BitLocker Compliance Baselines Endpoint Security Policies LAPS Scripting & Automation PowerShell Task Sequence Automation SCCM Scripting Reporting Automation SQL Query Fundamentals SSRS Reporting ITSM & Governance ServiceNow Incident Management Problem Management Change Management Knowledge Management Governance Reporting

Other Requirements

Windows 11 Engineering Microsoft Graph API Azure Administration Endpoint Analytics Patch My PC App-V / MSIX Packaging Azure Virtual Desktop (AVD)