Senior Technical Analyst - MECM, Intune

What You’ll Do

• Own, administer, maintain and continuously improve the enterprise Microsoft Endpoint Configuration Manager (MECM/SCCM) platform and all associated tooling. Manage the full MECM infrastructure, including Central Administration Site where applicable, primary and secondary sites, management points, distribution points, software update points, reporting services points, service connection points, boundaries, boundary groups, collections and client settings. Lead MECM platform build, upgrade, hotfix, capacity, availability, performance, backup, recovery and disaster recovery activities across a large and complex environment. Engineer, maintain and troubleshoot Windows operating system deployment using task sequences, boot images, driver and BIOS management, PXE, USMT and standard enterprise build processes. Own enterprise patch management through MECM, including Software Update Point/WSUS integration, Automatic Deployment Rules, deployment rings, maintenance windows, compliance monitoring, remediation and vulnerability reduction. Manage the end-to-end software lifecycle through MECM, including application and package creation, testing, deployment, supersedence, dependencies, uninstall, retirement, content distribution and compliance reporting. Provide L3 support for complex MECM incidents, client health issues, site system failures, content distribution problems, deployment failures, patching issues and operating system deployment defects. Lead technical troubleshooting and root cause analysis using MECM logs, SQL queries, WMI, PowerShell, client diagnostics and server-side platform monitoring. Monitor platform health, component status, replication, inbox processing, site database performance, distribution status, client activity and overall service availability; implement proactive controls and alerts. Maintain MECM security and governance, including role-based administration, service accounts, certificates, PKI/HTTPS configuration, least-privilege access, audit controls and operational documentation. Design and support Co-Management workloads between MECM and Intune, including device enrolment, tenant attach, Cloud Management Gateway and the phased movement of workloads to cloud management. Support the customer’s Intune migration roadmap by assessing MECM workloads, dependencies, applications, policies and device readiness, and by developing controlled migration plans and pilot rings. Configure and troubleshoot relevant Intune capabilities, including compliance policies, configuration profiles, application deployment, Windows Update for Business, Autopilot and endpoint security policies. Develop PowerShell automation, health checks, operational dashboards and reports to improve platform reliability, deployment success, compliance and support efficiency. Maintain technical documentation, architecture diagrams, support procedures, build standards, patching runbooks, operating models and knowledge articles. Work closely with security, infrastructure, network, application packaging, service management and workplace teams to deliver stable services and planned platform transformation. Provide technical mentorship, contribute to service improvements and lead assigned platform projects and changes. What You’ll Need Experience: Minimum 7+ years of hands-on experience supporting large enterprise endpoint management environments, with strong recent experience in MECM/SCCM platform engineering and L3 operations. MECM Platform Expertise: Deep hands-on knowledge of MECM current branch architecture, installation, configuration, site systems, hierarchy design, upgrades, hotfixes, backup/recovery, monitoring, performance and troubleshooting. Operating System Deployment: Strong experience with Windows 10/11 build engineering, task sequences, boot images, PXE, drivers, BIOS/firmware, USMT and operating system deployment troubleshooting. Patch Management: Advanced experience with WSUS/SUP, Automatic Deployment Rules, deployment rings, maintenance windows, servicing, compliance reporting and remediation across enterprise estates. Software Management: Strong experience with MECM applications, packages, collections, requirements, detection methods, dependencies, supersedence, content distribution and deployment troubleshooting. MECM Infrastructure: Strong knowledge of management points, distribution points, software update points, reporting services, boundaries, boundary groups, discovery methods, client installation and client health. Database and Reporting: Working knowledge of SQL Server, MECM database maintenance, SSRS reporting and SQL/WQL queries for operational analysis and compliance reporting. Troubleshooting: Proven ability to analyse MECM server and client logs, WMI, IIS, SQL, replication and content distribution issues and to lead complex root cause investigations. Co-Management: Strong experience implementing and supporting MECM and Intune Co-Management, tenant attach, Cloud Management Gateway and workload transition strategies. Intune: Practical hands-on experience with Intune configuration profiles, compliance, application deployment, Windows Update for Business, Autopilot and endpoint security. Intune is important for the migration roadmap, but MECM depth is essential for the immediate role. Cloud and Security: Understanding of Microsoft Entra ID, Azure services, certificates/PKI, Defender for Endpoint integration and enterprise endpoint security controls. Scripting and Automation: Strong PowerShell skills for MECM administration, automation, data collection, remediation, reporting and troubleshooting. Change and Service Management: Experience working within structured ITIL processes for incident, problem, change, release, capacity, availability and configuration management. Communication and Ownership: Strong written and verbal communication, documentation and stakeholder management skills, with the ability to take end-to-end ownership of a critical platform. Preferred: Relevant Microsoft certifications and experience delivering a phased transition from MECM-led management to Co-Management and Intune.