AvantGarde, LLC

Compensation

Full Description

Position Overview We are seeking a skilled Mid-Level Engineer with hands-on experience in SCCM, Windows Server administration, Azure patching, and enterprise-level Active Directory management. This role requires a strong background in automation, patch compliance, and infrastructure support in hybrid environments. Core Responsibilities SCCM (System Center Configuration Manager) · • Deploy and manage SCCM infrastructure. · • Create and maintain device collections. · • Package and deploy applications. · • Perform Operating System Deployment (OSD) using task sequences. · • Manage patching and software updates via SCCM. · • Generate reports via SSRS or built-in reporting tools. · • Troubleshoot client health and deployment failures. · • Integrate SCCM with Intune and configure co-management. · • Optimize boundary groups and content distribution. Active Directory (AD) · • Manage user, group, and computer accounts. · • Create and troubleshoot Group Policy Objects (GPOs). · • Design and delegate Organizational Units (OUs). · • Understand AD schema and domain controller roles. · • Perform LDAP queries and monitor AD replication. · • Manage trusts, forests, and domains. · • Administer DNS integration within AD. · • Script and automate AD tasks using PowerShell. Azure Patching & Update Management · • Utilize Azure Automation and Update Management. · • Schedule patches for hybrid/on-prem and Azure VMs. · • Monitor and report on patch compliance. · • Configure maintenance windows and patch groups. · • Use Azure Arc for non-Azure machines. · • Analyze patching insights via Log Analytics. · • Deploy Windows Update for Business policies via Intune. · • Remediate failed patches. Tools & Scripting · • Automate tasks using PowerShell. · • Use WMI and CIM for remote management. · • Familiar with Microsoft Endpoint Manager (MEM). · • Monitor and alert using Log Analytics and Azure Monitor. Security & Compliance · • Ensure patch compliance aligns with security standards. · • Apply CIS benchmarks and hardening practices. · • Manage RBAC in Azure environments. Windows Server Administration · • Install and configure Windows Server (2012 R2–2022). · • Manage roles: DHCP, DNS, IIS, File Services. · • Oversee domain services and GPO configurations. · • Monitor server performance and perform tuning. · • Configure Failover Clustering and High Availability. · • Administer Hyper-V and plan disaster recovery (e.g., Veeam). · • Manage RAID, SAN/NAS, and Storage Spaces. Windows Desktop Administration · • Deploy Windows 10/11 via WDS, MDT, or SCCM. · • Manage user profiles and desktop configurations. · • Install and manage software updates. · • Resolve desktop issues (networking, printers, apps). · • Apply local and group policies. · • Utilize remote tools (RDP, RSAT, Quick Assist).