SCCM/MECM Systems Administrator

Itero Group is a Women-Owned Small Business focused on simplifying complex transformations. We empower clients in the private and government sectors to become more optimized, digitally enabled, and data-driven organizations through our comprehensive business consulting and innovative delivery solutions.

Itero Group's dedicated team members are experienced thought leaders, tenacious workers, and creative thinkers. We hire people who are passionate about being catalysts for change - in our company, for our clients, throughout our career- and we empower people to express their ideas, create better practices, innovate better products, and become better professionals.

We have been named a Great Place to Work for six years, and offer a competitive salary and benefits package. 

• SCCM/MECM Administration (Must be Admin-Level Experience, Not Operator-Level)
• Hands-on experience managing users within the SCCM console.
• Proven ability to create and deploy application packages.
• Experience deploying applications and creating deployment packages.
• Experience with PXE Boot or an equivalent desktop imaging process.
• Ability to create custom Windows deployment packages from scratch (not just using vendor-supplied bundles).
• PowerShell or SCCM scripting for automated OS deployments.
• Patch Management & Security Remediation
• Experience deploying patches, security updates, and vulnerability fixes at an enterprise level.
• Knowledge of Nessus and Global Protect for security scanning and remediation.
• Experience managing Active Directory users, group policies, and domains.
• Ability to create, troubleshoot, and deploy Group Policy Objects (GPOs) across multiple endpoints.
• Knowledge of how to target and update specific endpoint groups (e.g., rolling out changes to 50+ endpoints simultaneously).
• PowerShell Scripting (Must Write Custom Scripts, Not Just Execute Pre-Built Scripts)
• Experience writing custom PowerShell scripts for system administration tasks.
• Troubleshooting SCCM/MECM client issues using PowerShell and WMI commands.
• Experience working in large IT environments (e.g., 30,000+ managed endpoints).
• Familiarity with ITIL frameworks and IT Service Management tools (e.g., ServiceNow).
• Security & Cloud Technologies (Bonus Skills, But Highly Preferred)
• Technical Certifications (At Least One Required): 
  • Security+ CE, Network+, MCSA / MCSE, Microsoft Modern Desktop Administrator, or equivalent.

• Bachelor’s degree in IT, Computer Science, or a related field.
• Additional certifications such as MCSA, Microsoft Modern Desktop Administrator Associate, ITIL 4 Foundation.
• Experience in enterprise IT environments with large-scale deployments (30,000+ endpoints).

We are seeking a Systems Administrator with SCCM/MECM expertise to support a large-scale IT environment. This hybrid role requires experience in software deployment, patch management, system configuration, and troubleshooting. The ideal candidate will have hands-on experience managing enterprise IT systems, ensuring security compliance, and leveraging automation tools like PowerShell to improve efficiency.

This is a hybrid role in Washington, DC 3 days onsite, 2 days remote after initial training and access granted.

• →Maintain the Standard Operating Environment (SOE) for desktops and remote devices.
• →Upgrade Windows 10 systems to the latest builds and remediate security vulnerabilities.
• →Troubleshoot SCCM/MECM client issues, Windows Management Instrumentation (WMI) repository, and Group Policy Objects (GPOs).
• →Deploy patches, software updates, and security remediations across desktops, remote devices, and servers.
• →Manage deployment of non-SOE software (e.g., MS Visio, MS Project, Adobe Acrobat).
• →Create, test, and troubleshoot GPOs to enforce security policies and system configurations.
• →Build, modify, and deploy software application packages in SCCM/MECM.
• →Develop PowerShell scripts to automate administrative tasks and resolve system issues.
• →Generate reports using SQL Reporting Services to track deployment success and compliance.
• →Create and deploy driver and BIOS updates.
• →Utilize PXE Boot or alternative imaging solutions to deploy operating systems to desktops.
• →Develop custom Windows deployment packages from scratch.
• →Manage security scanning and remediation using Nessus and Global Protect.
• →Establish and maintain Group Policies and domain configurations.
• →Configure security access controls in Azure.
• →Manage mobile device security and configurations using Intune.