SCCM Patch Management Engineer

• MetroSys is seeking an experienced SCCM Patch Management Engineer to support a regional credit union's enterprise patch-management environment.
• The environment is primarily Microsoft-based with some Linux infrastructure and supports systems operating within a regulated financial-services environment.

Responsibilities

• This is a hands-on technical role focused on administering and improving patch deployment through Microsoft SCCM / Configuration Manager .
• The engineer will work alongside senior infrastructure and security resources to execute patching activities, troubleshoot deployment issues, improve SCCM configurations, automate repetitive tasks, and maintain accurate patch-compliance reporting.
• Administer and support Microsoft SCCM / Configuration Manager with a primary focus on software updates and enterprise patch management.
• Create, maintain, and troubleshoot Software Update Groups, Automatic Deployment Rules (ADRs), device collections, deployment packages, and maintenance windows .
• Deploy Microsoft security, critical, cumulative, and other approved updates across Windows servers and endpoints.
• Monitor patch deployments and investigate systems reporting as failed, non-compliant, unknown, offline, or pending reboot.
• Troubleshoot SCCM client health, software update scanning, WSUS/SUP communication, content distribution, and deployment issues.
• Assist with establishing and maintaining test, pilot, and production patching groups .
• Support scheduled production patching and maintenance windows, including post-deployment validation and remediation.
• Develop and maintain PowerShell scripts and other automation to reduce repetitive SCCM administration and patch-management activities.
• Generate and maintain SCCM patch-compliance reports, dashboards, and operational metrics.
• Work with infrastructure and security teams to remediate systems with outstanding security updates and vulnerabilities.
• Assist with documentation of patching procedures, exceptions, deployment schedules, and technical configurations.
• Support audit and compliance requirements by maintaining accurate patching records and deployment evidence.
• Provide basic support for patching Linux or other infrastructure where required.
• Assist senior team members with implementing improvements identified during the overall patch-management assessment.

Requirements

• Qualifications 3+ years of experience supporting Microsoft SCCM / Microsoft Configuration Manager .
• Hands-on experience with SCCM Software Updates and Windows patch management .
• Working knowledge of PowerShell scripting and automation .
• Experience with patch-compliance reporting and remediation.
• Understanding of enterprise change-management and patch-testing processes.
• Ability to document technical procedures and communicate issues clearly to senior engineers and management.

Preferred

• Software Update Groups Automatic Deployment Rules (ADRs) SCCM Collections Maintenance Windows Software Update Points / WSUS Deployment Packages Distribution Points SCCM Client Health Experience troubleshooting failed or incomplete software-update deployments.
• Strong knowledge of Windows Server and Windows endpoint environments .
• Qualifications Experience supporting financial services, banking, credit unions, or another regulated environment .
• Experience with Microsoft Intune and Entra ID.
• Familiarity with SCCM/Intune co-management.
• Working knowledge of Linux patching.
• Familiarity with vulnerability-management tools and processes.
• Experience with SQL, SSRS, or Power BI reporting.
• Understanding of PCI or other security/compliance frameworks.
• Exposure to infrastructure automation and AI-assisted IT operations.

Position Overview

This position is 100% onsite in Phoenix, Arizona . The initial engagement is expected to last approximately three months, with the potential for extension or permanent employment.