• Network Engineer

    AvantGarde, LLC (Washington, DC)


    Position Overview:

    We are seeking a skilled Mid-Level Engineer with hands-on experience in SCCM, Windows Server administration, Azure patching, and enterprise-level Active Directory management. This role requires a strong background in automation, patch compliance, and infrastructure support in hybrid environments.

    Core Responsibilities: SCCM (System Center Configuration Manager)

    + Deploy and manage SCCM infrastructure.

    + Create and maintain device collections.

    + Package and deploy applications.

    + Perform Operating System Deployment (OSD) using task sequences.

    + Manage patching and software updates via SCCM.

    + Generate reports via SSRS or built-in reporting tools.

    + Troubleshoot client health and deployment failures.

    + Integrate SCCM with Intune and configure co-management.

    + Optimize boundary groups and content distribution.

    Active Directory (AD)

    + Manage user, group, and computer accounts.

    + Create and troubleshoot Group Policy Objects (GPOs).

    + Design and delegate Organizational Units (OUs).

    + Understand AD schema and domain controller roles.

    + Perform LDAP queries and monitor AD replication.

    + Manage trusts, forests, and domains.

    + Administer DNS integration within AD.

    + Script and automate AD tasks using PowerShell.

    Azure Patching & Update Management

    + Utilize Azure Automation and Update Management.

    + Schedule patches for hybrid/on-prem and Azure VMs.

    + Monitor and report on patch compliance.

    + Configure maintenance windows and patch groups.

    + Use Azure Arc for non-Azure machines.

    + Analyze patching insights via Log Analytics.

    + Deploy Windows Update for Business policies via Intune.

    + Remediate failed patches.

    Tools & Scripting

    + Automate tasks using PowerShell.

    + Use WMI and CIM for remote management.

    + Familiar with Microsoft Endpoint Manager (MEM).

    + Monitor and alert using Log Analytics and Azure Monitor.

    Security & Compliance

    + Ensure patch compliance aligns with security standards.

    + Apply CIS benchmarks and hardening practices.

    + Manage RBAC in Azure environments.

    Windows Server Administration

    + Install and configure Windows Server (2012 R2–2022).

    + Manage roles: DHCP, DNS, IIS, File Services.

    + Oversee domain services and GPO configurations.

    + Monitor server performance and perform tuning.

    + Configure Failover Clustering and High Availability.

    + Administer Hyper-V and plan disaster recovery (e.g., Veeam).

    + Manage RAID, SAN/NAS, and Storage Spaces.

    Windows Desktop Administration

    + Deploy Windows 10/11 via WDS, MDT, or SCCM.

    + Manage user profiles and desktop configurations.

    + Install and manage software updates.

    + Resolve desktop issues (networking, printers, apps).

    + Apply local and group policies.

    + Utilize remote tools (RDP, RSAT, Quick Assist).

    System Maintenance

    + Perform system health checks and disk optimization.

    + Manage firmware/driver updates and scheduled tasks via PowerShell.

    Patching & Updates

    + Manage patch cycles for servers and desktops.

    + Use WSUS/SCCM for update deployment.

    + Plan, test, and roll out cumulative updates.

    + Remediate failures and rollbacks.

    + Report compliance metrics and actions.

    Automation & Tools

    + Script routine tasks and patching automation.

    + Leverage SCCM, Intune, and Azure Automation platforms.

    Documentation & Compliance

    + Maintain up-to-date technical documentation.

    + Follow ITIL practices for changes and incidents.

    + Ensure security patching meets standards (HIPAA, PCI, SOX).