Cybersecurity Engineer

UEM Engineer – MECM/SCCM & Intune

Company: City of Charlotte – Government / Public Sector

Job Title: UEM Engineer – MECM/SCCM & Intune

Employment Type: Contract (3–6 Months, with potential for extension/conversion)

Location: Charlotte, NC – Onsite

Experience: 5+ Years

Industry: Government / Public Sector

Job Category: IT – Systems / Endpoint Engineering

Pay Rate: $55–$70/hr

About the Role

We are seeking a UEM Engineer to support and enhance an enterprise endpoint environment. This role will focus heavily on MECM/SCCM, Windows 10/11, application deployment, PowerShell automation, patching, and endpoint troubleshooting, with additional exposure to Intune and MECM/Intune co-management.

Key Responsibilities

• Administer, maintain, and enhance the enterprise MECM/SCCM environment.
• Engineer and support Windows 10/11 provisioning, OS deployment, feature upgrades, and device lifecycle processes.
• Package, test, deploy, maintain, and troubleshoot enterprise Windows applications.
• Manage monthly Windows security patching, remediation, compliance monitoring, and failed deployments.
• Develop and maintain PowerShell scripts for endpoint automation, deployment, administration, reporting, and remediation.
• Configure and troubleshoot Group Policy, endpoint configuration, and compliance policies.
• Support Intune and MECM/Intune co-management, including enrollment, configuration profiles, compliance, and application deployment.
• Troubleshoot Windows endpoint issues involving applications, OS, registry, services, AD/GPO, networking, identity, and security.
• Support endpoint security, vulnerability remediation, and enterprise security requirements.
• Monitor endpoint health, deployment status, patching, and configuration compliance.
• Collaborate with Cybersecurity, Identity, Infrastructure, Networking, Service Desk, and application teams.
• Identify opportunities to improve endpoint automation, reliability, security, and operational efficiency.

Required Qualifications

• Strong hands-on experience with MECM/SCCM in an enterprise environment.
• Experience managing the Windows 10/11 endpoint lifecycle, including deployment, provisioning, patching, software deployment, and troubleshooting.
• Experience packaging, deploying, and troubleshooting Windows applications.
• Hands-on PowerShell experience for endpoint administration, automation, or remediation.
• Strong Active Directory and Group Policy experience.
• Strong Windows endpoint troubleshooting skills.
• Understanding of enterprise endpoint configuration, security, and vulnerability remediation.
• Ability to work independently while collaborating effectively across technical teams.

Preferred Qualifications

• Strong Intune administration experience.
• MECM/SCCM + Intune co-management experience.
• Windows Autopilot experience.
• Entra ID experience.
• Advanced PowerShell scripting and endpoint automation.
• Experience engineering, rather than solely administering, MECM/SCCM environments.
• Experience supporting 5,000+ users in a large enterprise environment.
• Endpoint Analytics, proactive remediation, and compliance reporting.
• Enterprise Windows 11 migration or endpoint transformation experience.
• MDM/MAM and mobile-device management experience.
• Apple Business Manager, macOS, or iOS experience.
• PCI, Zero Trust, or other enterprise security/compliance experience.
• Endpoint, Intune, M365, Azure, or Entra certifications.
• Experience using AI-assisted tools to improve endpoint administration and automation.

Ideal Candidate

The ideal candidate is a hands-on endpoint engineer with strong MECM/SCCM and Windows endpoint experience, along with the ability to automate tasks using PowerShell. The candidate should understand enterprise application deployment, patching, security, and troubleshooting. Experience with Intune, co-management, Autopilot, and Entra ID is a strong plus.

The Company offers the following benefits for this position, subject to applicable eligibility requirements: medical insurance, dental insurance, vision insurance, 401(k) retirement plan, life insurance, long-term disability insurance, short-term disability insurance, paid parking/public transportation, paid time off, paid sick and safe time, hours of paid vacation time, weeks of paid parental leave, and paid holidays annually – as applicable.