Consultant Systems Engineer-SCCM+Intune

Role / Job Summary –

Key Responsibilities:

Ø  Design and maintain enterprise GPO architecture (OU design, WMI filters, ADMX/ADML, version control) to enforce consistent security and configuration baselines.

Ø  Own the SCCM/MECM architecture (Site, DPs, MPs, SUP/WSUS, CMG) for high availability and performance at scale.

Ø  Define and maintain Windows workstation standards (builds, baselines, posture, CIS/NIST-aligned hardening, BitLocker, Defender).

Ø  Lead the transition/maturity towards co-management and modern management (Intune/Entra ID) where applicable.

Ø  Manage gold images, deployment, and automation.

Ø  Create and maintain GPOs for performance and security.

Ø  Troubleshoot complex endpoint issues.

Ø  Develop automation using PowerShell.

Ø  Maintain documentation and audit readiness.

Required Skills & Experience:

Ø  Advanced expertise in GPO and Windows policy governance.

Ø  Strong experience with SCCM/MECM site administration.

Ø  Deep hands-on Windows 10/11 workstation engineering knowledge.

Ø  Strong PowerShell scripting capabilities.

Ø  Understanding of DNS, HTTP/S, PKI, and Windows networking.

Ø  Knowledge of CIS/NIST security baselines.

Years of Experience –

Ø  8 years of relevant experience in Project handling and DWS services.

Ø  10 or more years of overall IT experience.

Qualification / Certification –

Ø  Diploma / Degree (mandatory)

Ø  ITIL Foundation (optional)

Ø  Windows workstation certification (optional)

Ø  Windows server certification (optional)

Mandatory Skills / Experience –

Ø  GPO: Advanced design, inheritance modeling, loopback, WMI filtering, ADMX central store, troubleshooting (Resultant Set of Policy, gpresult, event tracing).

Ø  SCCM/MECM: Site administration, boundaries, content distribution, SUP/WSUS, task sequences (OSD/WinRE), ADRs , Collections strategy.

Ø  Windows Workstation (10/11): Imaging, feature update management, driver/firmware lifecycle, Defender/BitLocker/Firewall configuration, performance tuning.

Ø  Automation: Strong PowerShell (PSADT, WMI/CIM, CM cmdlets), Git, desired state & remediation scripts.

Ø  Networking & Infra Basics: DNS, HTTP/S, proxies, PKI/Certs, WinRM, content delivery (DP/Peer Cache/Delivery Optimization).

Ø  Security & Compliance: CIS/NIST benchmarks, vulnerability remediation orchestration, ASR/Defender policies, device control.

Good to have skills / Experience –

Ø  Experience with co-management and Autopilot

Ø  Experience with Configuration Baselines, Proactive Remediations, KQL (Defender/Log Analytics)

Ø  Agile methodologies

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.

Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.

If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?

You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.