Microsoft System Administrator Senior
Employer not yet confirmed · Washington, District of Columbia, United States · onsite
SAIC is seeking a Senior Endpoint Engineer to engineer, secure, and optimize our enterprise endpoint ecosystem. This position will provide critical support in engineering, securing, and optimizing an enterprise endpoint environment consisting of over 22,000 Windows, macOS, and iOS devices managed through MECM and Microsoft Intune in a co-managed configuration.
This individual will play a primary hands-on role in managing our MECM and Intune environments, executing modern management workloads, building PowerShell automation, and maintaining OS deployment and patching standards across Windows, macOS, and iOS devices.
Responsibilities:
- Endpoint Engineering & Administration: Maintain configuration baselines (NIST 800-171) and operational workflows across 22K+ total devices. Handle advanced technical escalations and complex engineering tasks.
- Modern Endpoint Management: Engineer and maintain Intune configuration profiles, compliance policies, Conditional Access/Entra ID integrations, and Apple device management (macOS/iOS) alongside co-managed MECM workloads.
- OS Deployment & Image Engineering: Build and test enterprise OS deployment task sequences, driver packages, BIOS configurations, and application packages with rigorous pre-deployment QA validation.
- Patch Management & Remediation: Execute monthly enterprise patching for Windows and 3rd-party applications, utilizing proactive remediation scripting to hit update compliance targets.
- PowerShell Automation: Develop robust PowerShell scripts, REST API integrations, and tools to automate repetitive engineering tasks and endpoint remediation.
- Cross-Functional Collaboration & Metrics: Collaborate with Security, Identity, and Network teams; participate in CAB change control processes; maintain a CMDB; and build operational dashboards using SQL, SSRS, and Power BI.
Required Qualifications & Technical Skills
- Management Tools: Strong hands-on experience with MECM/SCCM, Microsoft Intune, SQL/Excel, ServiceNow, and Co-Management strategies.
- OS & Hardware Platforms: Practical experience managing Windows workstation and server OS, macOS, and iOS lifecycles.
- Automation: Advanced PowerShell scripting capabilities (REST API usage, remediation scripts, custom tool creation).
- Identity & Security: Solid working knowledge of Entra ID, Conditional Access, and security compliance frameworks (e.g., NIST 800-171).
- Imaging & Deployment: Demonstrated experience creating and troubleshooting OS deployment task sequences, driver updates, and patch rings.
- Reporting & Data: Ability to query SQL databases and build reports using Power BI or SSRS. Ability to parse and review log files and large data sets.
- Collaboration: Experience navigating ITIL change management (CAB) and partnering across security and infrastructure teams.
- Experience with Dell Open Manage Enterprise is a plus.
- Experience Linux/Ansible, and/or Unix experience are a plus
- Must possess a Microsoft Certified Solutions Expert (MCSE) - Server Infrastructure or equivalent.