Systems Engineer (SCCM, AD, PKI, Windows Hello)

ODRC expects the SCCM/AD engineer to be extremely well rounded in the following,

Responsible for managing and maintaining a company's System Center Configuration Manager (SCCM) infrastructure, which involves tasks like developing, packaging, deploying software updates, patches, applications, and operating system images across all endpoints within an organization, ensuring smooth system configurations, software installations, and overall system health by monitoring and troubleshooting issues related to SCCM deployment and client management.

Implementing security policies within SCCM to manage endpoint configurations and compliance.

Identifying and resolving problems related to user login, directory synchronization, and authentication errors.

Troubleshooting SCCM client issues and ensuring client health across the network.

Responsible for designing, implementing, managing, and maintaining an organization's Active Directory infrastructure, including user accounts, group policies, access controls, and overall directory services, ensuring smooth operation and security across the network by utilizing Microsoft's Active Directory platform.

Regularly monitoring Active Directory performance and health, generating reports on usage and security compliance.

Designing, implementing, and maintaining a Public Key Infrastructure (PKI) system within an organization, which includes tasks like managing digital certificates, ensuring secure key generation, distributing certificates to users and devices, and performing regular security assessments to maintain the integrity of the PKI infrastructure; essentially overseeing the entire lifecycle of digital certificates to protect sensitive data and secure communications across the network.

Defining the overall PKI infrastructure, including the selection of Certificate Authorities (CAs), Registration Authorities (RAs), and Hardware Security Modules (HSMs).

Managing the issuance, renewal, and revocation of digital certificates for users, servers, and devices.

Diagnosing and resolving problems related to certificate issuance, renewal, and revocation.