Intermediate (Level 2) System Administrator

Join Exposant 3 (E3): The Power of People at the Heart of Technology!Exposant 3 is a consulting firm in business management and information technology, dedicated to supporting companies and organizations in their digital and organizational transformation.👉 Your Career at Exposant 3We firmly believe in healthy and humane management, where trust, competence, and the joy of succeeding together are at the core of our values.We offer you more than just a job: join an innovative team where artificial intelligence, process automation, and technological modernization are part of everyday life. At Exposant 3, we put people at the heart of everything we do.🚀 Our Vision?To enable you to deploy "the power of the human Exposant 3":The power of the individual: An environment where your commitment is valued.The power of the team: Strong collaboration where mutual support and successes are shared.The power of the company: A common vision for ambitious and collective goals.If you are looking to grow in a dynamic environment and contribute to large-scale projects while growing within a humane, innovative, and rapidly expanding company, then Exposant 3 is for you!We are looking for our future Intermediate (Level 2) System Administrator for MECM/PatchMyPC/Windows11/InTune to join our teams.🎯 Your MissionsAs a MEMC/SCCM ExpertConduct a comprehensive audit of the current MECM/SCCM infrastructure.Identify and document gaps, misconfigurations, or inefficiencies.Recommend and implement remediation actions based on Microsoft best practices and GC IT security and operational standards.Validate system health, including site roles, boundaries, collections, and deployments.Analyze and recommend alternatives and options for solutions.Provide technical support for both:Server-side components (site server, SQL, distribution points); andWorkstation-side components (client health, deployments, compliance).Assist with day-to-day operations, troubleshooting, and performance tuning.Offer strategic guidance for maintaining a secure and scalable MECM environment.Create, deploy, and support task sequences, and OS and software packages in MECM/SCCM.Plan, create, and maintain reports in SCCM.Create and support LDAP queries and MS PowerShell scripts.Provide recommendations and guidance to improve software packaging and update processes.Implement recommendations for improved packaging and update processes.As An InTune ExpertConduct a comprehensive audit of the current endpoint management and mobile device management (MDM) landscape.Identify and document gaps, misconfigurations, or inefficiencies in existing device management practices.Recommend and implement remediation actions based on Microsoft Intune best practices and GC IT security and operational standards.Validate Intune readiness including licensing, tenant configuration, and integration prerequisites.Analyze and recommend integration strategies for seamless coexistence with MECM/SCCM or transition to cloud-native management.Provide technical support for:Intune configuration policies, compliance policies, and application deployment.Device enrollment scenarios including Windows Autopilot, Apple DEP, and Android Enterprise.Assist with day-to-day operations, troubleshooting, and performance tuning of Intune services.Offer strategic guidance for maintaining a secure and scalable Intune environment.Create, deploy, and support configuration profiles, compliance baselines, and application packages in Intune.Plan, create, and maintain reports and dashboards using Microsoft Endpoint Manager admin center and Log Analytics.Develop and support PowerShell scripts and Graph API integrations for automation and advanced configurations.Provide recommendations and guidance to improve device lifecycle management and security posture.Implement recommendations for improved policy deployment and monitoring processes.As a Patch My PC ExpertPatchMyPC ImplementationInstall and configure PatchMyPC in the MECM environment.Ensure proper integration with MECM/SCCM.Set up catalog synchronization and third-party application publishing.Automation of Application PatchingDesign and implement automated patching routines using PatchMyPC.Configure deployment rules, update schedules, and compliance reporting.Test and validate patching workflows to ensure reliability and security.As a Windows11 Expert In An Active Directory EnvironmentAssist with the deployment, configuration, and maintenance of Windows 11.Ensure compatibility with MECM and PatchMyPCSupport PSC-specific configurations, policies, and security baselines.Create and support Active Directory Objects, attributes, and Group Policy Objects (GPOs).📝 Your ProfileWithin the last fifteen (15) years, Must have a minimum of ten (10) years of experience as a System Administrator.Within the last ten (10) years, Must have a minimum of five (5) years managing MECM/SCCM environments, for both the server-side components (site server, SQL, distribution points) and workstation-side components (client health, deployments, compliance).Proven experience auditing and remediating MECM/SCCM environmentsAbility to validate system health (site roles, boundaries, collections, deployments)Experience with troubleshooting, performance tuning, and day-to-day MECM operationsExperience with task sequences, OS/software deployment, and reportingProficiency in creating and supporting LDAP queries and PowerShell scriptsKnowledge of best practices and ability to recommend and implement improvementsMust have an in-depth knowledge of InTune.Conducting a full assessment of existing endpoint management infrastructure and identifying integration opportunitiesDesigning and executing an Intune integration strategy that complements MECM/SCCM operations and aligns with best practices security and operational standardsConfiguring device enrollment, compliance policies, and application deployment for Windows, iOS, and AndroidEstablishing and documenting ongoing maintenance procedures for Intune, including monitoring, reporting, and performance optimizationDelivering technical documentation and knowledge transfer sessions to support long-term sustainability of the co-managed solutionMust have an in-depth knowledge of Patch My PC.Experience installing and configuring Patch My PC to integrate with MECMAbility to automate patching routines, configure deployment rules, and validate patching workflows using Patch My PCMust have an in-depth knowledge of Windows 11 :Experience deploying, configuring, and maintaining Windows 11 in an enterprise AD environmentExperience creating and managing group policy objects (GPO)Experience creating and managing Active Directory objects and attributesAbility to deliver hands-on training and documentation to internal IT staffExperience developing materials covering change processes, risks, action items, and resolutionsProven ability to coach and train internal IT staff for solution sustainabilityDemonstrate specific experience in aligning a Windows, Active Directory, and MECM environment to the Government of Canada’s security requirements, including Group Policies Baselines and other best practices and standardsDemonstrate specific experience in aligning a Windows, Active Directory, and co-managed (MECM and InTune) environment to the Government of Canada’s security requirements, including Configuration Profiles Baselines and other best practices and standards.