Enter a job title or keyword

IT Senior Endpoint Engineer Microsoft Endpoint Configuration Manager (MECM) & Intune

Pantex

Job Location:

Amarillo, TX - USA

Monthly Salary: Not provided by the employer

Posted: 21 August 2026 (Yesterday)

Application Deadline: 18 November 2026

Vacancies: 1 Vacancy

Job Summary

Location: Amarillo TX - Pantex Plant
Job Title: IT Senior Endpoint Engineer - Microsoft Endpoint Configuration Manager (MECM) & Intune
Career Level From: Senior Associate
Career Level To: Senior Specialist
Organization: End User Computing ()
Job Specialty: System Administration

What Youll Do

As a hands-on technical specialist you will serve as the enterprise owner for endpoint management across Windows devices. Your primary responsibility will be the design configuration operation and troubleshooting of Microsoft Endpoint Configuration Manager (MECM) and Microsoft Intune along with the Azure/Entra ID services that keep Intune resilient and secure. You will drive patch/update compliance application and Operating System (OS) deployments client health and comanagement strategy Microsoft Endpoint Configuration Manager (MECM Intune) while closely collaborating with Cybersecurity Network and Support teams to ensure reliability security and compliance of our endpoint fleet. You are responsible for maintaining a thorough knowledge of applicable Federal State Department of Energy (DOE) Corporate and Plant rules regulations and Plant-wide operating policies and procedures.

Essential Job Duties

Microsoft Core Infrastructure (MCM) Platform Ownership & Optimization

Own administer and continually optimize MCM core infrastructure (site server Management Point (MP)/Distribution Point (DP) roles Structured Query Language (SQL) Windows Server Update Services (WSUS)/Software Update Point (SUP) boundary groups content distribution and backup/disaster recovery (DR) readiness).
Drive clienthealth improvement using telemetry automation and consistent collection hygiene.
Enhance platform performance and scalability across multiple locations and networks.

OS Deployment (OSD) Engineering

Lead design maintenance and modernization of OSD task sequences for Windows 11.
Engineer efficient driverlifecycle management secure imaging standards preprovisioning (BitLocker) postinstall hardening and automation to reduce build time and increase reliability.
Evaluate migration from traditional OSD to Autopilotfirst strategies where appropriate.

Software Packaging & Deployment

Establish packaging standards and best practices for Microsoft Installer (MSI)/Executable File (EXE)/Win32 deployments across MECM and Intune.
Build test and deploy applications at scale; optimize distributionpoint content placement and successrate visibility.
Expand capabilities using thirdparty patch/catalog solutions to increase coverage.

Patch & Update Compliance

Lead monthly update cycles for Windows OS Microsoft 365 Apps and thirdparty applications.
Rapidly remediate noncompliant devices through automation and targeted deployments.
Ensure WSUS/SUP synchronization health and maintain a reliable update pipeline.

Intune & Modern Device Management

Own Intune configuration strategy including Autopilot configuration profiles compliance policies and Windows Update for Business rings.
Implement and maintain Endpoint Security Baselines (BitLocker Defender firewall attack surface reduction Credential Guard).
Drive clarity and evolution of MECM/Intune workload split using comanagement and Tenant Attach.

Identity & Security Integration

Manage Entra ID (Azure AD) device identity Conditional Access policies rolebased access control and SCEP/NDES/PKI integrations.
Ensure secure enrollment compliance signaling and alignment with cybersecurity requirements.

Automation Monitoring & Troubleshooting

Use PowerShell Microsoft Graph Application Programming Interface (API) Kusto Query Language (KQL) (Log Analytics/Azure Monitor) and SQL Server Reporting Services (SSRS)/Power Business Intelligence (BI) reporting to automate operations and improve visibility.
Troubleshoot complex endpoint failures (Windows Management Instrumentation (WMI) Background Intelligent Transfer Service (BITS) policy conflict client registration SUP sync Cloud Management Gateway (CMG) connectivity) and deliver longterm fixes.

Documentation & Leadership

Create and maintain enterprise runbooks engineering standards and troubleshooting guides.
Lead technical workshops mentor peers and contribute to continuous improvement of endpoint management processes.

Minimum Job Requirements

Bachelors degree in engineering/science/information technology discipline: Minimum 2 years of relevant experience.
OR Masters degree in engineering/science/information technology discipline.
OR applicants without a bachelors degree may be considered based on a combination of at least 10 years of completed education and/or relevant experience.

Department of Energy (DOE) Order 426.2A Requirements

Not applicable.

Preferred Job Requirements

Expertlevel experience with MCM administration OSD engineering software distribution client health and update compliance.
Strong experience with Intune Autopilot configuration profiles compliance/policy management and Windows security baselines.
Deep PowerShell scripting capability operational analytics knowledge (Log Analytics/KQL SSRS Power BI).
Proven ability to diagnose and resolve complex Windows/MECM/Intune issues at scale.
Experience with CMG Tenant Attach and defining MECM/Intune comanagement workloads.
Experience optimizing MECM SQL performance and WSUS/SUP maintenance.
Work with Secure Communications Interoperability (SCUP) or thirdparty patching solutions.
Relevant Microsoft certifications (MD102 SC300 AZ104 AZ500) or equivalent handson proficiency.

#JointheMission: Your Impact Starts Here

At Pantex you wont just find a jobyoull discover a career of purpose safeguarding national security through work performed nowhere else on Earth. We empower dedicated innovative individuals like you to achieve their greatest impact surrounded by exceptional talent and limitless opportunities for professional growth.

When you #JointheMission you choose a lifetime career where your commitment is genuinely valued and rewarded. At Pantex we believe that extraordinary talent thrives when supported by a balanced life. Discover the flexibility that empowers you to excel coupled with a benefits package designed for your total peace of mind from comprehensive health coverage and robust retirement planning to opportunities for continuous learning through education reimbursement.

Notes

The minimum education and experience for the lowest career level in the job posting range are listed under Minimum Job Requirements. Successful candidates hired into a higher career level than the minimum in the range must meet the requirements listed in the job leveling charts for the career level into which they are being hired.

If a range of Career Levels is posted i.e. Senior Associate to Senior Specialist internal applicants already in one of the Career Levels would come across at their current Career Level. Internal applicants currently in a lower level Career Level would move to the lowest posted Career Level.

Requires a Q clearance; however all qualified candidates will be considered regardless of their current clearance status. The ability to obtain and maintain a Department of Energy Q clearance is required.

Position may require entry into Materials Access Areas (MAA) and participation in the Human Reliability Program (HRP). If HRP is required candidate must complete a counterintelligence-scope polygraph pursuant to 10 Code of Federal Regulations (CFR) 709. Medical requirements may apply.

Pantex is a drug-free workplace. Candidates accepting a job offer will be required to pass a pre-placement physical drug screening and background investigation. As an employee you may be required to receive and maintain a security clearance from the United States Department of Energy in order to meet eligibility requirements for access to sensitive information or matter. U.S. citizenship is a requirement for security clearance applicants. All employees are subject to random selection for drug testing without advance notification.

Pantex is an equal opportunity employer and does not tolerate discrimination in the terms and conditions of employment on the basis of race color sex sexual orientation pregnancy age religion national origin ancestry genetic information disability veteran status or other characteristic protected by law. Such terms and conditions of employment include but are not limited to hiring training promotion discipline compensation benefits and termination of employment. Pantex takes affirmative action to employ and advance in employment qualified individuals with disabilities and protected veterans; including disabled veterans recently separated veterans active-duty wartime or campaign badge veterans and Armed Forces service medal veterans. All employment decisions are based on business needs job requirements and individual qualifications.

Required Experience:

Manager

Apply Now