Senior (Level 3) System Administrator

Join Exposant 3 (E3): The Power of People at the Heart of Technology
Exposant 3 is a consulting firm in business management and information technology, dedicated to supporting companies and organizations in their digital and organizational transformation.

Your Career at Exposant 3
We firmly believe in healthy and humane management, where trust, competence, and the joy of succeeding together are at the core of our values.

We offer you more than just a job: join an innovative team where artificial intelligence, process automation, and technological modernization are part of everyday life. At Exposant 3, we put people at the heart of everything we do.

Our Vision?
To enable you to deploy
"the power of the human Exposant 3"
:

• The power of the individual: An environment where your commitment is valued.
• The power of the team: Strong collaboration where mutual support and successes are shared.
• The power of the company: A common vision for ambitious and collective goals.

If you are looking to grow in a dynamic environment and contribute to large-scale projects while growing within a humane, innovative, and rapidly expanding company, then Exposant 3 is for you

We are looking for our future Senior (Level 3) System Administrator for MECM/PatchMyPC/Windows11/InTune to join our teams.

Your Missions
As a MEMC/SCCM Expert

• Conduct a comprehensive audit of the current MECM/SCCM infrastructure.
• Identify and document gaps, misconfigurations, or inefficiencies.
• Recommend and implement remediation actions based on Microsoft best practices and GC IT security and operational standards.
• Validate system health, including site roles, boundaries, collections, and deployments.

• Analyze and recommend alternatives and options for solutions.

• Provide technical support for both:

• Server-side components (site server, SQL, distribution points); and

• Workstation-side components (client health, deployments, compliance).

• Assist with day-to-day operations, troubleshooting, and performance tuning.

• Offer strategic guidance for maintaining a secure and scalable MECM environment.
• Create, deploy, and support task sequences, and OS and software packages in MECM/SCCM.
• Plan, create, and maintain reports in SCCM.
• Create and support LDAP queries and MS PowerShell scripts.
• Provide recommendations and guidance to improve software packaging and update processes.
• Implement recommendations for improved packaging and update processes.

As An InTune Expert

• Conduct a comprehensive audit of the current endpoint management and mobile device management (MDM) landscape.
• Identify and document gaps, misconfigurations, or inefficiencies in existing device management practices.
• Recommend and implement remediation actions based on Microsoft Intune best practices and GC IT security and operational standards.
• Validate Intune readiness including licensing, tenant configuration, and integration prerequisites.
• Analyze and recommend integration strategies for seamless coexistence with MECM/SCCM or transition to cloud-native management.

• Provide technical support for:

• Intune configuration policies, compliance policies, and application deployment.

• Device enrollment scenarios including Windows Autopilot, Apple DEP, and Android Enterprise.
• Assist with day-to-day operations, troubleshooting, and performance tuning of Intune services.
• Offer strategic guidance for maintaining a secure and scalable Intune environment.
• Create, deploy, and support configuration profiles, compliance baselines, and application packages in Intune.
• Plan, create, and maintain reports and dashboards using Microsoft Endpoint Manager admin center and Log Analytics.
• Develop and support PowerShell scripts and Graph API integrations for automation and advanced configurations.
• Provide recommendations and guidance to improve device lifecycle management and security posture.
• Implement recommendations for improved policy deployment and monitoring processes.

As a Patch My PC Expert

• PatchMyPC Implementation

• Install and configure PatchMyPC in the MECM environment.

• Ensure proper integration with MECM/SCCM.

• Set up catalog synchronization and third-party application publishing.

• Automation of Application Patching

• Design and implement automated patching routines using PatchMyPC.

• Configure deployment rules, update schedules, and compliance reporting.
• Test and validate patching workflows to ensure reliability and security.

As a Windows11 Expert In An Active Directory Environment

• Assist with the deployment, configuration, and maintenance of Windows 11.
• Ensure compatibility with MECM and PatchMyPC
• Support PSC-specific configurations, policies, and security baselines.
• Create and support Active Directory Objects, attributes, and Group Policy Objects (GPOs).

Your Profile

• Within the last fifteen (15) years, must have a minimum of ten (10) years of experience as a System Administrator.

• Within the last ten (10) years, must have a minimum of five (5) years managing MECM/SCCM environments, for both the server-side components (site server, SQL, distribution points) and workstation-side components (client health, deployments, compliance).

• Proven experience auditing and remediating MECM/SCCM environments.

• Ability to validate system health (site roles, boundaries, collections, deployments).
• Experience with troubleshooting, performance tuning, and day-to-day MECM operations
• Experience with task sequences, OS/software deployment, and reporting.
• Proficiency in creating and supporting LDAP queries and PowerShell scripts.

• Knowledge of best practices and ability to recommend and implement improvements.

• Must have an in-depth knowledge of InTune.

• Conducting a full assessment of existing endpoint management infrastructure and identifying integration opportunities.

• Designing and executing an Intune integration strategy that complements MECM/SCCM operations and aligns with best practices security and operational standards.
• Configuring device enrollment, compliance policies, and application deployment for Windows, iOS, and Android.
• Establishing and documenting ongoing maintenance procedures for Intune, including monitoring, reporting, and performance optimization.

• Delivering technical documentation and knowledge transfer sessions to support long-term sustainability of the co-managed solution.

• Must have an in-depth knowledge of Patch My PC. Please demonstrate that the following is included:

• Experience installing and configuring Patch My PC to integrate with MECM.

• Ability to automate patching routines, configure deployment rules, and validate patching workflows using Patch My PC.

• Must have an in-depth knowledge of Windows 11.

• Experience deploying, configuring, and maintaining Windows 11 in an enterprise AD environment.

• Experience creating and managing group policy objects (GPO).

• Experience creating and managing Active Directory objects and attributes.

• Ability to deliver hands-on training and documentation to internal IT staff.

• Experience developing materials covering change processes, risks, action items, and resolutions.
• Proven ability to coach and train internal IT staff for solution sustainability.
• Demonstrate specific experience in aligning a Windows, Active Directory and MECM environment to the Government of Canada's security requirements, including Group Policies Baselines and other best practices and standards.
• Demonstrate specific experience in aligning a Windows, Active Directory and co-managed (MECM and InTune) environment to the Government of Canada's security requirements, including Configuration Profiles Baselines and other best practices and standards.