Senior Endpoint Management & Application Packaging Expert (SCCM and MECM, Patching, AVD, PowerShell)

Senior Endpoint Management & Application Packaging Expert (SCCM and MECM, Patching, AVD, PowerShell)

Location: Mexico

Experience: Minimum 10+ years of hands‑on experience in SCCM and MECM, Windows & third‑party patching, application packaging, and automation.

Education: Bachelor's degree (Graduate) in Computer Science / Computer Engineering or equivalent.

Role Summary

We are seeking an experienced Endpoint Management and Application Packaging Expert with deep expertise in Microsoft SCCM and MECM patching and software deployment, strong PowerShell automation skills, and proven experience packaging applications for Azure Virtual Desktop (AVD) and enterprise Windows environments. The ideal candidate will independently lead packaging and patching initiatives, troubleshoot complex deployment issues, and communicate clearly with technical and non‑technical stakeholders in excellent written and spoken English.

Key Responsibilities

SCCM and MECM Administration & Endpoint Management

• Administer and support Microsoft SCCM and MECM infrastructure and core roles (site systems, management points, distribution points, SUP/WSUS integration as applicable).
• Manage collections, boundaries, boundary groups, content distribution, and deployment strategies to ensure reliable software delivery at scale.
• Maintain endpoint health and compliance using configuration items, baselines, inventory, and reporting.

Patch Management (Windows & Third‑Party Applications)

• Own end‑to‑end Windows patching lifecycle using SCCM and MECM: planning, piloting, deployment, validation, reporting, and remediation.
• Configure and manage Automatic Deployment Rules (ADR), phased deployments, maintenance windows, and reboot experiences.
• Implement third‑party application patching for enterprise software (browsers, PDF tools, Java, collaboration tools, etc.) using SCCM and MECM‑based solutions.

Application Packaging & Deployment (Enterprise & AVD)

• Package, test, and deploy applications via SCCM and MECM, including:
  • MSI/EXE installations, transforms (MST), patches (MSP)
  • Detection rules, dependencies, supersedence, versioning, and rollback strategies
• Package and deploy applications for Azure Virtual Desktop (AVD), including multi‑session host considerations.
• Work with MSIX/modern packaging approaches where applicable.

Automation & PowerShell Scripting

• Design and maintain advanced PowerShell scripts for:
  • Application packaging
  • Deployment automation
  • Patch validation and remediation
  • Compliance and operational reporting
• Build reusable PowerShell frameworks with logging, error handling, and modular design.

Monitoring, Reporting & Troubleshooting

• Diagnose and resolve complex issues using SCCM and MECM client logs, Windows event logs, registry, WMI, and installer logs.
• Develop and maintain SCCM and MECM reports, dashboards, and compliance views using built‑in reporting and SQL (as required).

Collaboration & Governance

• Work closely with Security, Infrastructure, Service Desk, and Application teams to ensure successful rollouts.
• Follow ITIL‑aligned processes for incident, problem, and change management.
• Create high‑quality technical documentation, SOPs, runbooks, and knowledge articles.

Required Skills & Qualifications

Mandatory

• 10+ years experience in SCCM and MECM administration, patch management, and application packaging.
• Strong expertise in Windows OS patching and enterprise software update management.
• Proven hands‑on experience in application packaging and deployment at enterprise scale.
• Advanced PowerShell scripting skills.
• Experience working with Azure Virtual Desktop (AVD) or enterprise VDI environments.
• Excellent English communication skills (verbal and written).
• Knowledge of DEX.

Packaging & Installer Technologies

• MSI, EXE, MST, MSP, detection methods, custom scripts.
• Packaging toolsets such as:
  • PowerShell App Deployment Toolkit (PSADT)
  • AdminStudio / InstallShield / Advanced Installer (or equivalent)
  • MSIX Packaging Tool

Preferred / Nice‑to‑Have Skills

• Microsoft Intune (co‑management concepts with SCCM and MECM)
• Cloud Management Gateway (CMG)
• Microsoft Entra ID (Azure AD) integration
• Azure / Microsoft endpoint security alignment (Defender, baselines)
• Basic SQL for SCCM and MECM reporting
• Git / DevOps exposure for packaging lifecycle management