Our client, a multinational cruise line, is looking for a SCCM Engineer to take ownership of enterprise endpoint engineering and security. This is a high-impact role where you will directly shape how thousands of devices are deployed, secured, and maintained across a global fleet.

Why This Role Matters:

You will be the engineering force behind mission-critical systems: Operating System Deployment (OSD), automated patching, and third-party application management. Your work keeps a global fleet secure, compliant, and running smoothly, and your decisions will have visible, measurable impact across the organization.

What You Will Do:

Deployment Engineering (OSD):
- Architect and govern zero-touch OSD task sequences
- Manage boot images and driver packages across a diverse hardware fleet

Automated Patching (ADRs):
- Design and maintain Automatic Deployment Rules in SCCM/MECM
- Drive consistent, phased rollouts of Windows updates and security patches

Third-Party Patch Management:
- Automate deployment of third-party app updates (Chrome, Adobe, etc.)
- Build closed-loop remediation processes using enterprise patching tools

Security Analysis and Reporting:
- Analyze vulnerability reports and compliance data
- Spot trends in endpoint health and turn insights into action plans

Modern Management Integration:
- Support the shift to Microsoft Intune and Windows Autopilot
- Ensure stable co-management as the environment modernizes

Vulnerability Remediation:
- Translate security scan findings into PowerShell remediation scripts
- Deploy configuration changes that close security gaps fast

Endpoint Health and Automation:
- Use PowerShell and WQL to automate collection management
- Build custom reports that track deployment success and compliance

Why You Will Want This Job:

- Own high-visibility systems that protect a global enterprise
- Grow your skills in modern endpoint management (Intune, Autopilot, co-management)
- Work at the intersection of security and IT operations, a career path in high demand
- Make a measurable impact on fleet-wide security posture and performance


If you would like to learn more, please reach out to Elite Technical.

Required Skills

Technical Skills Required:

- Proven expertise in building and managing SCCM/MECM OSD task sequences and boot images.
- Hands-on experience configuring and troubleshooting Automatic Deployment Rules (ADRs).
- Strong background in third-party application patching and packaging.
- Proficiency in PowerShell for automation and remediating security findings.
- Ability to analyze enterprise security reports and translate them into technical tasks.
- Familiarity with Intune and Autopilot in a co-managed environment.
- Certifications: Relevant industry certifications (e.g., MD-102: Endpoint Administrator, or security-focused certifications) are preferred.

Soft Skills:
- Analytical Mindset: Ability to look at a security report and methodically plan a remediation strategy.
- Strategic Thinking: Focus on long-term automation rather than one-off manual fixes.
- Communication: Clear ability to report on security status and technical progress to both technical teams and management.