About the role
Role / Job Summary –
Key Responsibilities:
ØDesign and maintain enterprise GPO architecture (OU design, WMI filters, ADMX/ADML, version control) to enforce consistent security and configuration baselines.
ØOwn the SCCM/MECM architecture (Site, DPs, MPs, SUP/WSUS, CMG) for high availability and performance at scale.
ØDefine and maintain Windows workstation standards (builds, baselines, posture, CIS/NIST-aligned hardening, BitLocker, Defender).
ØLead the transition/maturity towards co-management and modern management (Intune/Entra ID) where applicable.
ØManage gold images, deployment, and automation.
ØCreate and maintain GPOs for performance and security.
ØTroubleshoot complex endpoint issues.
ØDevelop automation using PowerShell.
ØMaintain documentation and audit readiness.
Required Skills & Experience:
ØAdvanced expertise in GPO and Windows policy governance.
ØStrong experience with SCCM/MECM site administration.
ØDeep hands-on Windows 10/11 workstation engineering knowledge.
ØStrong PowerShell scripting capabilities.
ØUnderstanding of DNS, HTTP/S, PKI, and Windows networking.
ØKnowledge of CIS/NIST security baselines.