Microsoft Endpoint Management (MEM) Engineer

Job Title: Microsoft Endpoint Management (MEM) Engineer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: Secret

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

The Opportunity:
CACI is seeking an experienced Senior MECM Enterprise Engineer to join our dynamic IT team. The successful candidate will be responsible for the design, implementation, and lifecycle management of enterprise-scale MECM infrastructures that support mission-critical operations. This role requires advanced technical expertise in Windows Server, Active Directory, and SQL Server to maintain a secure, scalable, and highly available endpoint management environment. The engineer will oversee multi-tier MECM hierarchies, ensure compliance with organizational and DoD cybersecurity standards, and lead large-scale migration and modernization efforts


Responsibilities:
Infrastructure Management:

• Design, implement, and manage multi-tier MECM infrastructures, including Central Administration Sites (CAS), Primary Sites, and Secondary Sites supporting a geographically distributed network.

• Plan and execute MECM version upgrades, site migrations, and cloud-hosted deployments within Microsoft Azure environments.

MECM Functions:

• Develop and maintain MECM functions such as application deployment, patch management, operating system deployment (OSD), and compliance baselines.

• Administer and optimize SQL Server databases for MECM, including replication, indexing, and query performance tuning.

Integration and Compliance:

• Integrate MECM with Intune, Entra ID (Azure AD), Automation platforms, and other cloud services as part of hybrid management strategies.

• Collaborate with cybersecurity teams to implement DISA STIGs, vulnerability mitigation, and endpoint protection integration.

Access Control and Automation:

• Establish and maintain MECM role-based access control (RBAC), boundary groups, and distribution point hierarchies.

• Develop automation scripts in PowerShell to streamline MECM administrative functions and reporting.

Support and Documentation:

• Provide Tier III/IV support for MECM operations and assist with troubleshooting enterprise endpoint management issues.

• Document system architecture, configurations, and standard operating procedures in accordance with enterprise engineering best practices.

System Engineering and SDLC:

• Design and document robust, scalable, and efficient solutions that align with business objectives.

• Lead the documentation and design phases of solutioning, ensuring comprehensive and clear communication of technical specifications and system architectures.

• Collaborate with cross-functional teams to translate business requirements into technical solutions.

• Ensure all solutions adhere to industry best practices and standards.

• Mentor and guide junior team members in documentation and design best practices

Qualifications:

Required: 
 

• 10+ Years of relevant experience (Bachelor’s Degree in relevant field may be substituted for 5 years of relevant experience).

• 5+ years focused on MECM (SCCM) architecture and administration.

• Active DoD Secret or higher clearance is required.

• Candidate must be eligible for IT Level II (IAT-II) certification under DoD 8570 requirements. (Ex: Security+ or equivalent)

• Proven experience in system engineering and SDLC methodologies.

• Expert-level proficiency in MECM hierarchy design, including CAS, Primary, and Secondary sites, as well as Intune co-management configurations of endpoints in a hybrid environment.

• Expert-level proficiency in Windows Server (2016/2019/2022) administration and automation using PowerShell.

• Strong understanding of Active Directory, DNS, PKI, and Group Policy integration within MECM environments.

• Advanced SQL Server management and T-SQL query optimization skills specific to MECM databases.