Desktop Systems Management Engineer
Location: Fermilab, Batavia, Illinois
Employment Type: Full-Time | On-site / Hybrid
Reports To: IT Operations Manager / Endpoint Management Lead
Position Summary:
The Desktop Systems Management Engineer will be responsible for the centralized 
management, configuration, and deployment of Fermilab’s Windows and macOS end-user 
environments. This includes the administration of System Center Configuration Manager 
(SCCM), Jamf, and other enterprise management tools to ensure consistent configuration, 
security, and compliance across all devices.
Under Fermilab’s direction, this role supports system imaging, application packaging, patch 
deployment, and reporting. The engineer ensures all desktop systems meet operational, 
cybersecurity, and policy standards while maintaining efficiency and a high level of service 
quality.
Key Responsibilities:
1. Centralized Systems Management
• Provide desktop systems management support during Fermilab’s designated 
business hours.
• Administer and maintain SCCM, Jamf, and related endpoint management platforms
for both Windows and macOS devices.
• Create, maintain, and update master images and PC configurations for standardized 
deployments.
• Develop and manage application packaging and deployment processes for software 
distribution.
• Ensure all builds and configurations are properly documented and cataloged for 
traceability and compliance.
2. Patch & Policy Management
• Compile, test, and deploy patches, hotfixes, and configuration policies for all 
managed devices, ensuring adherence to Fermilab’s cybersecurity guidelines.
• Apply operating system and application updates to maintain compliance and system 
stability.
• Manage and enforce security and configuration baselines across all endpoints in 
collaboration with Fermilab’s cybersecurity team.
• Ensure proper scheduling, testing, and deployment of updates following ITIL change 
management procedures.
3. Application Packaging & Deployment
• Build and maintain standard application packages using SCCM and Jamf.
• Perform integrated testing of applications on master system images to ensure 
compatibility and stability before production deployment.
• Provide self-service software installation options for end users using approved 
management tools.
• Ensure all application packaging and deployment activities are documented and 
auditable.
4. System Monitoring & Reporting
• Monitor endpoints to ensure devices periodically check in with SCCM and Jamf 
systems.
• Work with end users to troubleshoot and remediate devices not reporting to central 
management.
• Generate and maintain reports, dashboards, and analytics on:
o Patch and deployment compliance
o System health and connectivity
o Software distribution success rates
o Licensing compliance and usage metrics
• Provide custom reports and dashboards to meet operational and management needs.
5. Process Improvement & Documentation
• Maintain comprehensive documentation of all system images, configurations, and 
deployment workflows.
• Contribute to the creation and refinement of Standard Operating Procedures (SOPs)
for endpoint management.
• Provide recommendations for system improvements, tool upgrades, or automation 
opportunities to enhance reliability and efficiency.
• Support continuous service improvement by identifying gaps and suggesting updates to 
best practices.
Mandatory Skills and Qualifications:
• Microsoft Certification relevant to systems engineering (e.g., Microsoft Certified: 
Endpoint Administrator Associate or equivalent).
• Minimum 4 years of hands-on experience with:
o Building and maintaining SCCM and Jamf environments.
o Using SCCM/MDT for Windows OS image creation and deployment.
o Using Jamf Pro for macOS image creation and deployment.
o Software packaging and deployment through SCCM and Jamf.
o Customizing SCCM and Jamf reports and dashboards.
o Utilizing SCCM and Jamf for software license management and compliance 
tracking.
o Managing system configurations and compliance through SCCM DCM (Desired 
Configuration Management) or similar modules.
Preferred Skills and Competencies:
• Proficiency in PowerShell, Bash, or Python scripting for automation and configuration 
management.
• Experience with Active Directory, Group Policy, and Azure AD/Intune integration.
• Understanding of ITIL processes and experience with structured change management.
• Strong analytical and troubleshooting skills for both Windows and macOS 
environments.
• Excellent communication, documentation, and time management abilities.
• Experience in large enterprise or research environments is a plus.
Work Environment:
• On-site at Fermilab during designated business hours.
• Collaborative work with Service Desk, Cybersecurity, and Infrastructure teams.
• May involve occasional off-hours work for patching or major deployment windows.
• Must adhere to Fermilab’s security, compliance, and change control policies.
Key Performance Indicators (KPIs):
• Compliance rate of devices with patching and configuration policies.
• Success rate of application deployments and updates.
• Accuracy and timeliness of system reporting.
• Reduction in recurring endpoint issues.
• Adherence to change control and documentation standards.