SCCM Engineer

Job Description:

We are looking for a highly skilled SCCM Engineer with Microsoft Intune and SharePoint expertise to manage enterprise -wide endpoint management, software deployment, compliance enforcement, and collaboration solutions. The ideal candidate will have extensive experience with Microsoft System Center Configuration Manager (SCCM), Microsoft Intune, and SharePoint administration, along with strong scripting and automation skills.

Key Responsibilities:

SCCM Administration & Infrastructure Management:

• Engineer should be able to: Design, implement, and maintain a scalable SCCM infrastructure, including:
  • Primary and secondary sites, management points, distribution points, and Cloud Management Gateway (CMG).
    
  • Co -management with Microsoft Intune for hybrid endpoint management.
    
  • Windows Servicing & Feature Update deployments via SCCM/Intune.
    
• Develop and optimize OS Deployment (OSD) Task Sequences with PXE, MDT, and Autopilot.
  
• Manage Software Update Point (SUP), WSUS, ADRs, and compliance reporting.
  
• Configure Role -Based Access Control (RBAC) to secure SCCM infrastructure.
  
• Create and manage SQL queries and SSRS reports for compliance and system health.
  

Microsoft Intune & Modern Endpoint Management:

• Configure Intune MDM/MAM policies for Windows, iOS, Android, and macOS devices.
  
• Deploy Windows Autopilot for modern device provisioning and hybrid join scenarios.
  
• Implement Intune compliance policies, Defender for Endpoint, BitLocker, and security baselines.
  
• Integrate Intune with Conditional Access (CA) and Microsoft Defender for Endpoint (MDE).
  
• Troubleshoot Intune device enrollment, configuration profiles, compliance failures using:
  • Intune Troubleshooting Blade, MDMDiagnostics Tool, Autopilot logs, and Event Viewer.
    
• Develop PowerShell scripts for proactive remediation and automation within Intune.
  

SharePoint Administration & Collaboration Solutions:

• Manage and maintain SharePoint Online.
  
• Configure SharePoint sites, libraries, workflows, and permissions.
  
• Implement Data Loss Prevention (DLP), compliance policies, and access controls.
  
• Automate SharePoint processes using Power Automate, PowerShell, and Graph API.
  
• Integrate Microsoft 365 Apps (Teams, OneDrive, Exchange) with SharePoint.
  
• Troubleshoot SharePoint Online issues, including permissions, search indexing, and performance optimization.
  

Automation & Scripting:

• Develop PowerShell scripts for:
  • Automating SCCM deployments, Intune policies, and SharePoint configurations.
    
  • Advanced Windows endpoint management automation.
    

Troubleshooting & Support:

• Provide Tier 3 support for SCCM, Intune, and SharePoint -related escalations.
  
• Troubleshoot SCCM/Intune issues using WMI Explorer, Event Viewer, SCCM logs, and Intune logs.
  
• Troubleshoot SharePoint Online sync issues, document library access issues, and performance bottlenecks.
  

Documentation & Reporting:

• Maintain detailed documentation for SCCM, Intune, and SharePoint configurations.
  
• Provide security compliance reports for SCCM/Intune/SharePoint environments.
  

Required Technical Skills & Experience:

• 5+ years of hands -on experience with SCCM (Current Branch), Microsoft Intune, and SharePoint administration.
  
• Advanced expertise in SCCM infrastructure management, OSD, SUP, CMG, and Co -management.
  
• Strong PowerShell scripting experience for SCCM, Intune, and SharePoint automation.
  
• Experience with Windows Autopilot, Hybrid Azure AD Join, and Conditional Access policies.
  
• Deep understanding of SharePoint Online architecture, workflows, Power Automate, and SharePoint Permissions Model.
  
• Knowledge of Windows Defender ATP, and BitLocker management.
  
• Hands -on experience with SQL Server queries, SQL Server Rerpoting Services.
  
• Strong troubleshooting skills using Intune logs, SharePoint ULS logs, and SCCM client logs.
  

Preferred Qualifications:

• Experience with third -party patching tools (ie. Ivanti).
  
• Knowledge of SharePoint migration tools like ShareGate.
  
• Experience with Microsoft Defender for Endpoint (MDE) security policies.