SCCM System Administrator

The opportunity
We are seeking a highly skilled SCCM / Intune Administrator to oversee, support, and modernize our global client endpoint infrastructure. This role requires technical ownership across a comprehensive device portfolio, focusing on the engineering, deployment, and security compliance of corporate workstations and mobile devices. Working in tandem with the Global Wintel team and local Operations Centers, you will serve as the subject matter expert for unified endpoint management (UEM)—transitioning traditional on-premises setups into modern, cloud-managed environments. Additionally, you will act as a primary technical contact for endpoint security compliance, software delivery automation, and advanced incident management.
The role

Unified Endpoint Architecture: Implement, maintain, and optimize Microsoft SCCM (MECM) and Microsoft Intune environments to manage global client operating systems and mobile assets seamlessly.
Image Engineering & OS Deployment (OSD): Own the creation, maintenance, and deployment of standardized corporate OS images, using SCCM task sequences, Windows Autopilot, and driver package management.
Application Packaging & Deployment: Engineer, test, and distribute software packages, applications, and updates globally, ensuring minimal disruption to business operations and manufacturing environments.
Vulnerability & Patch Management: Execute monthly client patching lifecycles across corporate workstations and specialized terminal endpoints, generating compliance reports to meet strict security standards.
Mobile Device Management (MDM/MAM): Configure and support Microsoft Intune policies, including Conditional Access, configuration profiles, compliance policies, and application protection schemes for iOS, Android, and Windows devices.
Co-Management & Cloud Migration: Actively manage and expand the hybrid co-management bridge between on-premises SCCM and Azure-based Intune services to streamline endpoint delivery.
Vendor & Lifecycle Management: Partner with third-party technical vendors and hardware providers for tier-3 platform escalation. Assist management with endpoint lifecycle forecasting, hardware auditing, and procurement evaluations.
Cross-Functional Collaboration: Partner with the Global Wintel, Information Security, and localized application teams to align endpoint configurations with corporate compliance baselines.
Mobility: Flexibility to travel between localized operational facilities as required to support large-scale endpoint rollouts or hardware modernizations.

The requirements

Endpoint Management Expertise: 5+ years of dedicated, hands-on experience designing, engineering, and troubleshooting Microsoft SCCM / MECM and Microsoft Intune environments.
OS & Imaging Mastery: 5+ years of technical experience configuring complex SCCM task sequences, managing Windows Autopilot rollouts, and administering modern Microsoft client operating systems (Windows 10/11).
Cloud Identity & MDM Integration: 5+ years of operational experience with Azure Active Directory (Microsoft Entra ID), Conditional Access policies, and Microsoft Intune enrollment methods.
Scripting & Automation: Proven proficiency using PowerShell to automate application installations, modify registry configurations, and script customized endpoint remediation routines.
Directory & Network Interoperability: Strong understanding of how endpoints interact with Active Directory architecture, Group Policies (GPOs), DHCP, DNS, and corporate file distribution networks.
Industrial / Edge IT Exposure: Demonstrated experience tailoring or hardening client operating system configurations for specialized industrial environments, kiosks, or Manufacturing Execution Systems (MES).
Communication & Collaboration: Excellent professional verbal and written communication skills in English. Must be highly self-motivated and capable of operating autonomously while remaining a cohesive teammate within local and global circles.
Project & Time Management: Exceptional organizational skills with a proven track record of coordinating multiple complex application deployments simultaneously, prioritizing active workloads, and meeting tight organizational deadlines.
Collaboration: Proven ability to work cross-functionally with Infrastructure, Security, Helpdesk, and Development teams across international sites.
Operational Flexibility: Flexibility and willingness to participate in a rotational, on-call framework to support a 24/7 global manufacturing operation.