Enterprise Workstation Patch Engineer; SCM - Windows

We are seeking an experienced Workstation Patching Engineer with strong expertise in Software Configuration Management (SCM) tools to support enterprise workstation patching, vulnerability remediation, and compliance across Windows environments. The ideal candidate will ensure secure, timely, and compliant patch deployments while minimizing business impact in large-scale enterprise infrastructures.

• Manage and support enterprise workstation patching operations using SCM tools.
• Plan, test, and deploy Windows OS and third-party application patches across enterprise endpoints.
• Perform patch assessments, pilot testing, phased deployments, and post-deployment validation.
• Troubleshoot patch deployment failures, endpoint issues, and remediation activities.
• Coordinate patching schedules and maintenance windows with security, infrastructure, and operations teams.
• Ensure endpoint patch compliance aligned with organizational security policies and audit requirements.
• Support vulnerability remediation initiatives driven by security scanning and compliance tools.
• Maintain rollback procedures, patch exceptions, and deployment documentation.
• Generate compliance reports, deployment metrics, and patch status dashboards.
• Develop and maintain patching runbooks, SOPs, and operational documentation.
• Support continuous improvement initiatives for patch automation and endpoint management processes.

• 6+ years of experience in workstation patching, endpoint management, or infrastructure support.
• Strong hands-on experience with Software Configuration Management (SCM) tools such as SCCM/MECM, Intune, or equivalent.
• Experience managing Windows workstation patching at OS and application levels.
• Strong understanding of patch lifecycle management including assessment, testing, deployment, validation, and rollback.
• Knowledge of Microsoft patching cycles, security updates, and maintenance processes.
• Experience troubleshooting patch deployment and endpoint-related issues.
• Familiarity with vulnerability management and endpoint compliance reporting.
• Working knowledge of Windows OS internals and workstation administration.
• Experience working in large-scale enterprise endpoint environments.
• Familiarity with ITSM tools for incident, change, and problem management.
• Scripting knowledge using Power Shell or equivalent automation tools is preferred.