Systems Engineer- MECM

Systems Engineer- Intermediate Ashburn, VA (hybrid telework and occasional onsite) POSITION SUMMARY: As an integral member of the CBP End User Device IT Management Services team, the Systems Engineer will be responsible for administration of a distributed Windows desktop environment, maintaining BeyondTrust remote workstations support, utilizing enterprise-scale technical experience with cloud and hybrid infrastructures, and internet-based devices. The ideal candidate will work collaboratively across teams providing Tier III/IV support to end users through the effective use and management of the enterprise ticket management system with expedient resolution to trouble tickets, service requests, break fixes, and change requests. This role shall adhere to established procedures and approved cybersecurity practices while delivering exceptional customer support. ESSENTIAL FUNCTIONS/RESPONSIBILITIES: Provide operations and maintenance support of Microsoft Endpoint Configuration Manager (MECM) infrastructure, Microsoft Intune, BeyondTrust, and updates to include troubleshooting issues when they arise. Perform Tier III/IV troubleshooting of issues pertaining to client workstation systems, AutoPilot, Out of Box Experience (OOBE), and distribution points Fulfill requests for ad-hoc reporting and information regarding client workstation systems Fulfill end user and change requests for operational engineering assignments pertaining to software deployments, security updates, and overall configuration of client workstation systems Write technical support documents, develop technical approaches, and provide recommendations to improve upon current processes where necessary Provide mentoring and assistance with junior team personnel when needed Perform additional duties as assigned EDUCATION, EXPERIENCE, and CERTIFICATIONS: Current CBP Background Investigation -or- US Citizenship with ability to obtain a Federal Public Trust clearance (REQUIRED). Bachelor’s degree in Information Systems (or related field) OR 3-5 years of relevant IT experience Certifications in A+, Security+, BeyondTrust, Microsoft 365 Endpoint Administrator, or MECM related are a plus. SPECIFIC KNOWLEDGE, SKILLS, & ABILITIES, and QUALIFICATIONS: Strong understanding of Windows 10 and 11 operating systems Proficient skill level utilizing and maintaining enterprise management systems with Microsoft Intune and MECM to include management of assets, scope tags, collections, software distributions, updates, and reports/queries Demonstrated experience within a distributed environment of at least 5,000 workstations and/or servers, 20,000+ workstations a plus, 75,000+ in government setting ideal Experience utilizing scripting and/or programming languages such as PowerShell, C++ (Visual Studio), and MS Graph API to automate processes and manage system configuration Thorough understanding of Windows Installer technology and significant experience configuring applications for silent or unattended deployments Understanding of Active Directory, including implementing and troubleshooting Group Policy Objects (GPOs) and Group Policy Preferences (GPPs), as well as experience with Entra ID and Configuration Service Provider (CSP) management Ability to troubleshoot application installations and end user issues pertaining to usage of various desktop applications (BeyondTrust, Corretto, M365 Apps, Adobe products, and numerous other third-party applications) Strong understanding of Edge and Google Chrome (security zones, document modes, add-ons) and ability to troubleshoot/identify web app and site security or compatibility related issues Understanding of Line-of-Business (LOB) apps with regards to provisioning (side-loading) and troubleshooting failed installations or updates Knowledge of application virtualization using App-V (or similar product) Experience using Microsoft Endpoint Configuration Manager Task Sequences (or similar product) for the purposes of building or performing Operating System Deployments (OSD) requiring multiple steps Excellent process-oriented skills with regards to configuration management and troubleshooting within a complex enterprise environment Strong analytical skills with the ability to analyze data sets to determine trends and identify strategies Outstanding interpersonal and communication skills with the ability to effectively communicate across diverse audiences and influence cross functionally Ability to multi-task and be creative and innovative in a dynamic, fast paced matrix team environment Use of Remote Admin Tools as well as Hyper-V systems for building and validating test cases Experience with Power Automate and workflow automation tools such as SCORCH are a plus Experience with LAPS and BitLocker a plus Proficient level understanding of cybersecurity ramifications of group policy settings. Experience with Security Technical Implementation Guidelines (STIG) a plus. At Indigo IT, we offer an expansive benefits package for our employees, which includes: Medical, Dental, and Vision coverage options. In addition, we offer 401(k) with company match, Group life and disability, Flex Spending Accounts (FSA), Paid Time Off (PTO), Paid holidays, and Education assistance. We also have in house training programs for employees, we reward thought leadership with bonuses and recognition for publishing, speaking, and innovative thought leadership in our industry. Indigo IT is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. This employer uses E-Verify.