Company Description
* TECEZE is an IT service provider based in UK, London, offering a wide range of services to businesses across all sectors. With top vendor partners, formal training, and vendor certifications, we aim to maximize the return on technology investments for our clients. Specializing in IT managed services, hardware supply, meeting room installations, AV solutions, and more, we provide 24/7 support and years of experience in service delivery.
Role Description
* The SCCM L3 Engineer is responsible for the design, implementation, administration, and troubleshooting of Microsoft System Center Configuration Manager (SCCM/MECM) infrastructure. The role requires advanced expertise in software deployment, patch management, OS imaging, endpoint security, compliance, and automation to support enterprise environments. The SCCM L3 Engineer will also work on escalations, perform root cause analysis, and provide guidance for L1/L2 teams.
* Key Responsibilities:
* 1. SCCM Infrastructure Design & Administration
* Architect, implement, and manage SCCM/MECM infrastructure across multiple sites.
* Perform capacity planning, load balancing, and scalability assessment.
* Configure and manage SCCM roles (MP, DP, SUP, SQL, etc.).
* Maintain SCCM health, ensuring compliance with best practices.
* 2. OS Deployment & Imaging
* Develop, test, and deploy OS images (OSD) using SCCM task sequences .
* Troubleshoot PXE boot issues and driver management.
* Optimize imaging processes for speed, reliability, and automation.
* Integrate Microsoft Autopilot and Intune for modern endpoint management.
* 3. Application Packaging & Software Deployment
* Package, deploy, and manage enterprise applications using SCCM.
* Manage application dependencies, versioning, and compatibility testing.
* Automate software deployment via PowerShell scripting .
* Troubleshoot failed deployments, software conflicts, and installation errors .
* 4. Patch Management & Compliance
* Plan and execute monthly patch deployments (WSUS, SUP) for Windows, Office, and third-party apps .
* Configure and manage compliance baselines.
* Automate patching workflows and reporting.
* Troubleshoot failed updates, rollback issues, and patching errors .
* 5. Endpoint Security & Compliance
* Implement BitLocker encryption, Windows Defender, and security baselines .
* Integrate SCCM with Defender ATP, Intune, and Azure Security Center .
* Ensure compliance with enterprise security policies.
* 6. SCCM Troubleshooting & Escalation Support
* Provide L3-level support for complex SCCM issues escalated by L1/L2 teams.
* Perform log analysis (Logs, Event Viewer, CMTrace, WMI, SQL queries) to resolve issues.
* Conduct root cause analysis (RCA) and problem resolution for recurring issues.
* 7. Scripting & Automation
* Develop PowerShell scripts for task automation, reporting, and remediation.
* Automate repetitive administrative tasks for efficiency.
* Create custom reports using SQL queries and SSRS (SQL Server Reporting Services) .
* 8. Performance Optimization & Monitoring
* Monitor SCCM infrastructure health using built-in and third-party tools.
* Optimize SCCM database performance and ensure SQL efficiency.
* Fine-tune client policies, maintenance tasks, and bandwidth management .
* 9. Documentation & Knowledge Sharing
* Create and maintain detailed documentation for SCCM architecture, configurations, and SOPs.
* Provide training and mentoring to L1/L2 support teams.
* Maintain a knowledge base of known issues, troubleshooting steps, and best practices .
* 10. Integration with Modern Management Solutions
* Work with Microsoft Intune, Co-Management (SCCM + Intune), and Autopilot for hybrid management.
* Integrate SCCM with Azure AD, Windows Update for Business (WUfB), and cloud-based services .
* Required Skills & Qualifications:
* Education: Bachelor's degree in IT, Computer Science, or a related field.
* Certifications: Microsoft Certified: Endpoint Administrator Associate (MD-102) or equivalent.
* Experience: 7+ years of hands-on experience with SCCM/MECM administration in an enterprise environment.
* Technical Skills:
* ✅ SCCM/MECM Infrastructure Management
* ✅ OS Deployment (OSD, MDT, WDS, Autopilot)
* ✅ Software Packaging (MSI, App-V, PowerShell, Chocolatey)
* ✅ Patch Management (WSUS, SUP, ADRs, Compliance Baselines)
* ✅ SQL Queries, SSRS Reporting
* ✅ PowerShell Automation for SCCM & Endpoint Management
* ✅ Troubleshooting CMTrace logs, Event Viewer, WMI Issues
* ✅ Endpoint Security (BitLocker, Defender ATP, Security Baselines)
* ✅ Integration with Intune, Co-Management, Azure AD, Autopilot
* ✅ Performance Tuning (SCCM Site Server, SQL Optimization, DP Bandwidth)
* ✅ Networking Knowledge (PXE Boot, DHCP, DNS, Firewall Rules)