Job Description

Endpoint Engineer - Patching

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: Secret

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

The Opportunity:

CACI is looking for a skilled Microsoft Endpoint Configuration Manager (MECM, formerly SCCM) Patching Lead in support of the Department of the Air Force (DAF) Enterprise IT as a Service (EITaaS) program.  You will be responsible for overseeing the patch management process across our organization using Microsoft Endpoint Configuration Manager. You will bring in-depth knowledge of MECM, Windows operating systems, and best practices in patch management and security. 

On the EITaaS program, CACI will deliver enhanced capabilities and services to implement and operate an enterprise SIPR ITSM solution, enterprise service desk, endpoint management and security solution, as well as CONUS/OCONUS field support and life cycle support for end user devices to enable the DAF to transition focus from IT operations to mission operations.

Responsibilities:

• Develop, implement, and maintain a comprehensive patch management strategy using MECM.

• Plan, schedule, and oversee the deployment of security updates, hotfixes, and service packs across the organization's IT infrastructure on the SIPR network to meet DAF mission requirement.

• Manage the entire application patching lifecycle, while tracking all relevant SLA/SLRs and provide reports as required.

• Create, test, and optimize patch deployment packages and task sequences.

• Monitor patch compliance and generate reports for management and auditing purposes.

• Troubleshoot complex patching issues and provide timely resolutions.

• Collaborate with security teams to address vulnerabilities and ensure timely patching of critical systems.

• Stay informed about the latest security threats, Microsoft updates, and industry best practices.

• Develop and maintain documentation for patching processes, procedures, and policies.

• Mentor and train team members on MECM patching best practices and techniques.

• Participate in change management processes and ensure minimal disruption to business operations during patch deployments.

• Establishing procedures based on industry best practices for both routine and zero-day patch management.

• Deploy applications and application updates based on defined criteria.

• Remediate issues related to failed patches or applications and conflicts related to patching. 

• Create documentation/SOPs for new procedures and manual steps to complete tasks for soft hand-offs and cross-training of support personnel. 

• Operate and maintain the overall MECM infrastructure supporting the enterprise.

• Collaborate with DAF enterprise and program security teams to ensure requirements are met within allotted timeframes.

• Communicate effectively and collaboratively with customers, stakeholders, and peers.

Qualifications:

Required: 

• Bachelor’s Degree in relevant field (Will consider experience in lieu of degree).

• 7+ years of experience as a System Engineer, System Administrator, or related roles

• Must be able to obtain a Secret Clearance: Current and active Secret Clearance preferred.

• DoD 8140 compliance; Must meet 8570/8140 DoD Cyber Workforce Compliance requirement – have or obtain prior to hire IAT Level II certification (CompTIA Security+ CompTIA Cybersecurity Analyst (CySA+), Certified Network Defender (CND), CCNA Security, Red Hat Certified System Administrator (RHCSA), etc)

• In-depth knowledge of Windows operating systems and Microsoft update technologies.

• Strong understanding of IT security principles and patch management best practices.

• Experience with PowerShell scripting for automation of patching processes.

• Familiarity with Windows Server Update Services (WSUS) and Microsoft Update Catalog.

• Excellent analytical and problem-solving skills.

• Experience testing, deploying, and troubleshooting the installation of Microsoft and third-party software updates

• Experience managing a large MECM infrastructure

• Experience managing Windows Servers and Workstations

• Experience working in a DoD environment

• Familiarity with STIG requirements

• Familiarity with ITILv4

• Familiarity with Agile Scrum methodologies

Desired: 

• Experience with ServiceNow

• Experience with third-party patching solutions and vulnerability management tools.

• Knowledge of cloud-based patching solutions (e.g., Microsoft Intune).

• Familiarity with compliance standards such as HIPAA, PCI-DSS, or ISO 27001.

• Familiarity with Agile methodologies.

• Strong communication abilities and experience working in cross-functional teams.

• Strong communication and team collaboration abilities.

• Microsoft certifications related to MECM/SCCM and Windows Server

-

______________________________________________________________________________

What You Can Expect:

 

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI takes pride in fostering a diverse and accessible culture where every individual feels supported to chart their own path. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Your potential is limitless. So is ours.

Learn more about CACI here.

______________________________________________________________________________

Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. Learn more here.

The proposed salary range for this position is:

$102,900 - $216,200

CACI is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, age, national origin, disability, status as a protected veteran, or any other protected characteristic.

',