Windows Patching Engineer; SCCM​/MECM & PowerShell Automation NYGCI

Job Title:

Windows Patching Engineer (SCCM/MECM & Power Shell Automation) | NYGCI | Riyadh, Saudi Arabia

Recruiting Company: NYGCI

Job Location:

Riyadh, Saudi Arabia

Job Type: Full-Time

Candidate Requirement:
Candidates currently based in Saudi Arabia (KSA)

Nationality:
Open to all nationalities currently residing in Saudi Arabia

Hiring Priority:
Immediate Requirement

Environment:
Large-Scale Enterprise & Production Infrastructure

NYGCI is seeking an experienced Windows Patching Engineer to manage and automate enterprise patch management processes across large-scale Windows environments. This role is critical in ensuring infrastructure security, compliance, system stability, and operational efficiency through effective patching, automation, monitoring, and remediation activities.

As a Windows Patching Engineer, you will be responsible for administering and securing enterprise Windows Server environments through structured patch management and automation strategies. You will design, implement, and optimize automated patch deployment solutions using SCCM/MECM, WSUS, and Power Shell while ensuring minimal business disruption during maintenance windows. The successful candidate will work closely with infrastructure, security, operations, and change management teams to validate, deploy, and monitor Windows updates across production systems.

This role requires strong troubleshooting capabilities to address patch failures, compliance gaps, and deployment challenges within mission-critical enterprise environments. The position offers an excellent opportunity to contribute to the security and reliability of a large enterprise infrastructure.

• Administer and maintain enterprise Windows Server environments.
• Design, implement, and manage end-to-end patch management processes.
• Develop Power Shell scripts to automate patch deployment, validation, reporting, and remediation activities.
• Administer Microsoft Endpoint Configuration Manager (MECM/SCCM) and Windows Server Update Services (WSUS).
• Plan and execute monthly security, cumulative, and critical update deployments.
• Monitor patch compliance levels and ensure adherence to security standards.
• Validate patch deployments across development, test, staging, and production environments.
• Troubleshoot and resolve patch deployment failures and update-related issues.
• Perform root cause analysis and implement corrective actions for recurring patching challenges.
• Coordinate change management activities and maintenance windows with stakeholders.
• Generate operational, compliance, and audit reports related to patch management.
• Support vulnerability remediation initiatives and infrastructure hardening activities.
• Ensure minimal downtime and service impact during patch implementation.
• Collaborate with infrastructure, security, and operations teams to improve patching efficiency.

• Strong experience administering Microsoft Windows Server environments.
• Extensive hands-on experience with enterprise patch management processes.
• Advanced Power Shell scripting and automation expertise.
• Proven experience designing and implementing patch automation solutions.
• Strong knowledge of Microsoft Endpoint Configuration Manager (MECM/SCCM).
• Experience managing Windows Server Update Services (WSUS).
• Expertise in automated deployment, monitoring, validation, and reporting processes.
• Strong troubleshooting experience involving patch deployment failures and remediation.
• Deep understanding of Windows Updates, Security Updates, Cumulative Updates, and patch lifecycle management.
• Experience working in production and large-scale enterprise environments.
• Knowledge of change management processes and maintenance window planning.
• Strong analytical, troubleshooting, and problem-solving abilities.
• Excellent documentation and communication skills.

• Microsoft certifications related to Windows Server administration.
• Experience managing hybrid cloud infrastructure environments.
• Familiarity with Azure Update Management and cloud-based patching solutions.
• Experience with vulnerability management tools such as Tenable, Qualys, or Rapid
  7.
• Knowledge of ITIL service management practices.
• Experience integrating patch management with enterprise security and compliance programs.
• Exposure to infrastructure automation platforms and configuration management tools.

For Windows patching and infrastructure engineering roles, hiring managers look for candidates who can demonstrate measurable improvements in patch compliance, automation, and security posture. Highlight enterprise-scale environments you’ve supported, the number of servers managed, Power Shell automation projects delivered, reductions in patch deployment time, compliance improvements achieved, and your experience handling critical production patching windows with minimal downtime.