Specialist - Cloud & Infra Management

We are seeking a skilled and detail-oriented Patch Engineer with 5-7 years of experience in managing and maintaining patch management solutions across enterprise workstation environments The ideal candidate will be responsible for ensuring timely deployment of security patches, maintaining compliance, and mitigating vulnerabilities using tools like MEMCM, SCCM, WSUS, BigFix, JAMF, and PatchMyPC Key Responsibilities: - Manage, administer, and update Software Update Groups (SUGs) and Automatic Deployment Rules (ADRs) for workstation patch deployments - Validate successful patch deployments and ensure systems meet patch compliance standards - Create and maintain Standard Operating Procedures (SOPs) for recurring patching and vulnerability remediation tasks - Research and implement vendor-recommended mitigation solutions for vulnerabilities without OEM patches in coordination with vendor support and client approval - Regularly review and clean up outdated or unnecessary patches from the MEMCM repository - Utilize WSUS for approving, declining, and managing patches - Provide technical support to EUC Patch Technicians for troubleshooting patch deployment issues - Develop, test, and execute uninstall scripts to remove unauthorized or unapproved software packages - Collaborate with OEMs/Vendors to resolve patch-related issues and ensure compatibility - Prepare and present patch compliance reports and metrics to stakeholders - Prioritize patches based on criticality, including zero-day vulnerabilities and past-due updates - Follow and enforce client-defined patch management policies and SLAs - Conduct pre-deployment testing in controlled environments to ensure patch stability and compatibility - Leverage tools like MEMCM, BigFix, JAMF, and PatchMyPC for patch deployment and third-party application updates Required Skills/Qualifications: - Bachelors degree in Computer Science, Information Technology, or related field - 5-7 years of hands-on experience in patch management using MEMCM, SCCM, WSUS, BigFix, JAMF, or similar tools - Strong understanding of Windows OS patching, third-party application updates, and endpoint security - Experience with PowerShell scripting for automation and remediation tasks - Familiarity with compliance reporting and vulnerability management frameworks - Excellent troubleshooting, documentation, and communication skills - Ability to work independently and collaboratively in a fast-paced environment Preferred Certifications: - Microsoft Certified: Endpoint Administrator Associate - ITIL Foundation - CompTIA Security+ or equivalent