SME - MS System Center Configuration Manager (SCCM)

About the Role

SME \- MS System Center Configuration Manager (SCCM) Nagpur, Maharashtra **Job Summary** --------------- We are seeking a highly skilled SCCM / MECM L3 Senior Engineer to lead our Endpoint Management architecture and high\-tier operations. You will be responsible for designing, optimizing, and maintaining Microsoft Endpoint Configuration Manager (MECM) and WSUS environments, as well as driving modern management transformations (Intune/Co\-Management). This role handles top\-tier escalations, complex OSD architecture, enterprise patch strategies, site infrastructure health, and advanced PowerShell automation across large\-scale North American desktop and server fleets. Job Title: SCCM / MECM L3 Senior Systems Engineer\\\\\\\\r\\\\\\\\nShift: North America (NA) Business Hours\\\\\\\\r\\\\\\\\nExperience: 8–12 Years\\\\\\\\r\\\\\\\\nJob Summary\\\\\\\\r\\\\\\\\nWe are seeking a highly skilled SCCM / MECM L3 Senior Engineer to lead our Endpoint Management architecture and high\-tier operations. You will be responsible for designing, optimizing, and maintaining Microsoft Endpoint Configuration Manager (MECM) and WSUS environments, as well as driving modern management transformations (Intune/Co\-Management). This role handles top\-tier escalations, complex OSD architecture, enterprise patch strategies, site infrastructure health, and advanced PowerShell automation across large\-scale North American desktop and server fleets.\\\\\\\\r\\\\\\\\nKey Responsibilities\\\\\\\\r\\\\\\\\nArchitecture, Site Health \& Infrastructure\\\\\\\\r\\\\\\\\n• Architect, upgrade, and maintain MECM hierarchy components: Central Administration Sites (CAS), Primary Sites, Secondary Sites, and Distribution Points (DPs).\\\\\\\\r\\\\\\\\n• Manage SQL Server database performance for MECM, including indexing, maintenance tasks, and site replication status.\\\\\\\\r\\\\\\\\n• Oversee site boundary strategies, fallback relationships, Cloud Management Gateway (CMG), and bandwidth\-throttling policies across enterprise networks.\\\\\\\\r\\\\\\\\nAdvanced Patching, WSUS \& Compliance Strategy\\\\\\\\r\\\\\\\\n• Design and govern enterprise patch management strategies and Software Update Point (SUP) maintenance policies.\\\\\\\\r\\\\\\\\n• Solve complex WSUS architecture bottlenecks, IIS application pool crashes, and database degradation issues.\\\\\\\\r\\\\\\\\n• Author custom Configuration Items (CIs) and Compliance Baselines using PowerShell and WMI to enforce security compliance.\\\\\\\\r\\\\\\\\nOSD Architecture \& Modern Management\\\\\\\\r\\\\\\\\n• Architect enterprise\-wide Task Sequences, custom boot images, driver catalogs, and USMT strategies for bare\-metal and OS upgrade deployments.\\\\\\\\r\\\\\\\\n• Lead modern management adoption, including Microsoft Intune, Cloud Management Gateway (CMG), Tenant Attach, and Co\-Management workloads.\\\\\\\\r\\\\\\\\n• Develop complex PowerShell automation scripts for software packaging, deployment remediation, and administrative workflow efficiency.\\\\\\\\r\\\\\\\\nL3 Incident Management \& Leadership\\\\\\\\r\\\\\\\\n• Serve as the highest technical escalation point for critical (P1/P2\) incidents, root cause analysis (RCA), and complex troubleshooting.\\\\\\\\r\\\\\\\\n• Conduct deep\-dive analysis into server/client logs, WMI, SQL queries, and network traces (Wireshark) to resolve systemic failures.\\\\\\\\r\\\\\\\\n• Mentor L1/L2 engineering teams, author technical architecture documentation, and partner with InfoSec for endpoint vulnerability remediation.\\\\\\\\r\\\\\\\\nTechnical Requirements\\\\\\\\r\\\\\\\\nArea Core Competencies\\\\\\\\r\\\\\\\\nPrimary Endpoint MECM / SCCM Infrastructure Architecture, SUP, CMG, Fallback Groups\\\\\\\\r\\\\\\\\nModern Management Microsoft Intune, Co\-Management, Autopilot, Tenant Attach, Conditional Access\\\\\\\\r\\\\\\\\nOSD \& Scripting Advanced Task Sequences, MDT integration, WMI, Expert\-level PowerShell\\\\\\\\r\\\\\\\\nDatabase \& Web SQL Server (MECM DB maintenance/querying), IIS Web Server configuration\\\\\\\\r\\\\\\\\nNetwork \& Security Active Directory, GPO/LAPS, DNS/DHCP, Subnetting, PKI Certificate Management\\\\\\\\r\\\\\\\\nQualifications \& Certifications\\\\\\\\r\\\\\\\\n• Bachelor’s degree in Computer Science, Information Technology, or equivalent practical experience.\\\\\\\\r\\\\\\\\n• 8\+ years of dedicated hands **Key Responsibilities** ------------------------ Architecture, Site Health \& Infrastructure • Architect, upgrade, and maintain MECM hierarchy components: Central Administration Sites (CAS), Primary Sites, Secondary Sites, and Distribution Points (DPs). • Manage SQL Server database performance for MECM, including indexing, maintenance tasks, and site replication status. • Oversee site boundary strategies, fallback relationships, Cloud Management Gateway (CMG), and bandwidth\-throttling policies across enterprise networks. Advanced Patching, WSUS \& Compliance Strategy • Design and govern enterprise patch management strategies and Software Update Point (SUP) maintenance policies. • Solve complex WSUS architecture bottlenecks, IIS application pool crashes, and database degradation issues. • Author custom Configuration Items (CIs) and Compliance Baselines using PowerShell and WMI to enforce security compliance. OSD Architecture \& Modern Management • Architect enterprise\-wide Task Sequences, custom boot images, driver catalogs, and USMT strategies for bare\-metal and OS upgrade deployments. • Lead modern management adoption, including Microsoft Intune, Cloud Management Gateway (CMG), Tenant Attach, and Co\-Management workloads. • Develop complex PowerShell automation scripts for software packaging, deployment remediation, and administrative workflow efficiency. **Skill Requirements** ---------------------- Serve as the highest technical escalation point for critical (P1/P2\) incidents, root cause analysis (RCA), and complex troubleshooting. • Conduct deep\-dive analysis into server/client logs, WMI, SQL queries, and network traces (Wireshark) to resolve systemic failures. • Mentor L1/L2 engineering teams, author technical architecture documentation, and partner with InfoSec for endpoint vulnerability remediation. **Other Requirements** ---------------------- Primary Endpoint MECM / SCCM Infrastructure Architecture, SUP, CMG, Fallback Groups Modern Management Microsoft Intune, Co\-Management, Autopilot, Tenant Attach, Conditional Access OSD \& Scripting Advanced Task Sequences, MDT integration, WMI, Expert\-level PowerShell Database \& Web SQL Server (MECM DB maintenance/querying), IIS Web Server configuration Network \& Security Active Directory, GPO/LAPS, DNS/DHCP, Subnetting, PKI Certificate Management