SME - MS System Center Configuration Manager (SCCM)

Job Description

SME - MS System Center Configuration Manager (SCCM)

Nagpur, Maharashtra

Job Summary

We are seeking a highly skilled SCCM / MECM L3 Senior Engineer to lead our Endpoint Management architecture and high-tier operations. You will be responsible for designing, optimizing, and maintaining Microsoft Endpoint Configuration Manager (MECM) and WSUS environments, as well as driving modern management transformations (Intune/Co-Management). This role handles top-tier escalations, complex OSD architecture, enterprise patch strategies, site infrastructure health, and advanced PowerShell automation across large-scale North American desktop and server fleets. Job Title: SCCM / MECM L3 Senior Systems Engineer\\\ Shift: North America (NA) Business Hours\\\ Experience: 8-12 Years\\\ Job Summary\\\ We are seeking a highly skilled SCCM / MECM L3 Senior Engineer to lead our Endpoint Management architecture and high-tier operations. You will be responsible for designing, optimizing, and maintaining Microsoft Endpoint Configuration Manager (MECM) and WSUS environments, as well as driving modern management transformations (Intune/Co-Management). This role handles top-tier escalations, complex OSD architecture, enterprise patch strategies, site infrastructure health, and advanced PowerShell automation across large-scale North American desktop and server fleets.\\\ Key Responsibilities\\\ Architecture, Site Health & Infrastructure\\\ • Architect, upgrade, and maintain MECM hierarchy components: Central Administration Sites (CAS), Primary Sites, Secondary Sites, and Distribution Points (DPs).\\\ • Manage SQL Server database performance for MECM, including indexing, maintenance tasks, and site replication status.\\\ • Oversee site boundary strategies, fallback relationships, Cloud Management Gateway (CMG), and bandwidth-throttling policies across enterprise networks.\\\ Advanced Patching, WSUS & Compliance Strategy\\\ • Design and govern enterprise patch management strategies and Software Update Point (SUP) maintenance policies.\\\ • Solve complex WSUS architecture bottlenecks, IIS application pool crashes, and database degradation issues.\\\ • Author custom Configuration Items (CIs) and Compliance Baselines using PowerShell and WMI to enforce security compliance.\\\ OSD Architecture & Modern Management\\\ • Architect enterprise-wide Task Sequences, custom boot images, driver catalogs, and USMT strategies for bare-metal and OS upgrade deployments.\\\ • Lead modern management adoption, including Microsoft Intune, Cloud Management Gateway (CMG), Tenant Attach, and Co-Management workloads.\\\ • Develop complex PowerShell automation scripts for software packaging, deployment remediation, and administrative workflow efficiency.\\\ L3 Incident Management & Leadership\\\ • Serve as the highest technical escalation point for critical (P1/P2) incidents, root cause analysis (RCA), and complex troubleshooting.\\\ • Conduct deep-dive analysis into server/client logs, WMI, SQL queries, and network traces (Wireshark) to resolve systemic failures.\\\ • Mentor L1/L2 engineering teams, author technical architecture documentation, and partner with InfoSec for endpoint vulnerability remediation.\\\ Technical Requirements\\\ Area Core Competencies\\\ Primary Endpoint MECM / SCCM Infrastructure Architecture, SUP, CMG, Fallback Groups\\\ Modern Management Microsoft Intune, Co-Management, Autopilot, Tenant Attach, Conditional Access\\\ OSD & Scripting Advanced Task Sequences, MDT integration, WMI, Expert-level PowerShell\\\ Database & Web SQL Server (MECM DB maintenance/querying), IIS Web Server configuration\\\ Network & Security Active Directory, GPO/LAPS, DNS/DHCP, Subnetting, PKI Certificate Management\\\ Qualifications & Certifications\\\ • Bachelor's degree in Computer Science, Information Technology, or equivalent practical experience.\\\ • 8+ years of dedicated hands

Key Responsibilities

Architecture, Site Health & Infrastructure • Architect, upgrade, and maintain MECM hierarchy components: Central Administration Sites (CAS), Primary Sites, Secondary Sites, and Distribution Points (DPs). • Manage SQL Server database performance for MECM, including indexing, maintenance tasks, and site replication status. • Oversee site boundary strategies, fallback relationships, Cloud Management Gateway (CMG), and bandwidth-throttling policies across enterprise networks. Advanced Patching, WSUS & Compliance Strategy • Design and govern enterprise patch management strategies and Software Update Point (SUP) maintenance policies. • Solve complex WSUS architecture bottlenecks, IIS application pool crashes, and database degradation issues. • Author custom Configuration Items (CIs) and Compliance Baselines using PowerShell and WMI to enforce security compliance. OSD Architecture & Modern Management • Architect enterprise-wide Task Sequences, custom boot images, driver catalogs, and USMT strategies for bare-metal and OS upgrade deployments. • Lead modern management adoption, including Microsoft Intune, Cloud Management Gateway (CMG), Tenant Attach, and Co-Management workloads. • Develop complex PowerShell automation scripts for software packaging, deployment remediation, and administrative workflow efficiency.

Skill Requirements

Serve as the highest technical escalation point for critical (P1/P2) incidents, root cause analysis (RCA), and complex troubleshooting. • Conduct deep-dive analysis into server/client logs, WMI, SQL queries, and network traces (Wireshark) to resolve systemic failures. • Mentor L1/L2 engineering teams, author technical architecture documentation, and partner with InfoSec for endpoint vulnerability remediation.

Other Requirements

Primary Endpoint MECM / SCCM Infrastructure Architecture, SUP, CMG, Fallback Groups Modern Management Microsoft Intune, Co-Management, Autopilot, Tenant Attach, Conditional Access OSD & Scripting Advanced Task Sequences, MDT integration, WMI, Expert-level PowerShell Database & Web SQL Server (MECM DB maintenance/querying), IIS Web Server configuration Network & Security Active Directory, GPO/LAPS, DNS/DHCP, Subnetting, PKI Certificate Management

Apply now

Information at a Glance

Why HCLTech?

At HCLTech, youll supercharge your potential. Youll find your career. And youll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.