End User Computing Engineer

Job Overview:
Requirement/Must Have:
Deep expertise in SCCM/MECM software update point, ADRs, deployment rings, client health. Hands-on experience with Microsoft Intune / Autopilot / Windows Update for Business. Advanced Power Shell scripting for automation (compliance remediation, report extraction, deployment triggers).

Experience with vulnerability management tools:
Qualys, Tenable Nessus, or Rapid7 InsightVM. Knowledge of Windows OS lifecycle, patch Tuesday cycle, CBS, WUA, and WinSxS. Understanding of Bit Locker, Windows Defender, and endpoint security baselines (CIS / STIG). Experience integrating patch workflows with Service Now ITSM and CMDB. Working knowledge of Azure AD, Entra , and Conditional Access policies. Strong analytical and troubleshooting skills for complex patch failures.

Excellent documentation skills able to produce clear SOPs, RCAs, and change records. Strong verbal and written communication skills. Proactive mindset identifies process gaps and proposes improvements. Ability to manage concurrent work streams under deadline pressure. Responsibilities:
Own the patch management lifecycle: assessment, testing, approval, deployment, validation, and reporting for all EUC endpoints. Design and maintain software update groups, collections, and deployment rules in SCCM/MECM and Microsoft Intune. Develop and maintain Power Shell / WMI scripts to automate patch compliance checks, remediation, and reporting. Act as L2 escalation for patch deployment failures, application compatibility issues, and non-compliant device investigations.

Conduct patch testing in pilot/UAT rings before production rollout; document test results and obtain change approval. Integrate Qualys / Tenable vulnerability scan data to drive patch prioritisation based on CVSS scores. Define and enforce patching SLAs for Critical, High, Medium, and Low severity patches per security policy. Maintain and improve the patch management runbook, SOPs, and exception handling process. Collaborate with security operations (SOC) to address zero-day threats and emergency patch deployments.

Produce monthly patch compliance reports and trend analysis for management review. Mentor and guide L1 analysts; review their tickets and provide technical feedback. Nice to Have:
Familiarity with macOS patch management (Jamf Pro / Munki) is an advantage. Microsoft 365 Certified:
Endpoint Administrator Associate (MD-102). Microsoft Certified:
Azure Administrator Associate (AZ-104). CompTIA Security+ or CySA+. ITIL 4 Managing Professional (or Foundation). Qualys Certified Specialist Vulnerability Management.

Skills:

Windows. SCCM. Power Shell. MECM. Microsoft Intune. Qualys. Tenable. WMI. Service Now. Azure AD. Entra  And

Education:

07+ years of experience in IT infrastructure or patch management. Benefits:
Our Benefits Include:
Medical, Dental, and Vision Insurance 401(k) Retirement Plan Health Savings Account (HSA) Disability Insurance (Short-Term and Long-Term) Life and AD&D Insurance Paid Sick Leave (where required by applicable state or local law) Supplemental Insurance Plans Identity Theft Protection Pet Insurance Employee Wellness Programs Employee Assistance Program (EAP) Career Growth and Professional Development Opportunities

Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws. About Cynet Systems Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc.

is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia. As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers.

Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and customer success.