SCCM Patch Management Engineer

Position Overview

MetroSys is seeking an experienced SCCM Patch Management Engineer to support a regional credit union's enterprise patch-management environment. This is a hands-on technical role focused on administering and improving patch deployment through Microsoft SCCM / Configuration Manager.

The engineer will work alongside senior infrastructure and security resources to execute patching activities, troubleshoot deployment issues, improve SCCM configurations, automate repetitive tasks, and maintain accurate patch-compliance reporting.

The environment is primarily Microsoft-based with some Linux infrastructure and supports systems operating within a regulated financial-services environment.

This position is 100% onsite in Phoenix, Arizona. The initial engagement is expected to last approximately three months, with the potential for extension or permanent employment.

Key Responsibilities

• Administer and support Microsoft SCCM / Configuration Manager with a primary focus on software updates and enterprise patch management.

• Create, maintain, and troubleshoot Software Update Groups, Automatic Deployment Rules (ADRs), device collections, deployment packages, and maintenance windows.

• Deploy Microsoft security, critical, cumulative, and other approved updates across Windows servers and endpoints.

• Monitor patch deployments and investigate systems reporting as failed, non-compliant, unknown, offline, or pending reboot.

• Troubleshoot SCCM client health, software update scanning, WSUS/SUP communication, content distribution, and deployment issues.

• Assist with establishing and maintaining test, pilot, and production patching groups.

• Support scheduled production patching and maintenance windows, including post-deployment validation and remediation.

• Develop and maintain PowerShell scripts and other automation to reduce repetitive SCCM administration and patch-management activities.

• Generate and maintain SCCM patch-compliance reports, dashboards, and operational metrics.

• Work with infrastructure and security teams to remediate systems with outstanding security updates and vulnerabilities.

• Assist with documentation of patching procedures, exceptions, deployment schedules, and technical configurations.

• Support audit and compliance requirements by maintaining accurate patching records and deployment evidence.

• Provide basic support for patching Linux or other infrastructure where required.

• Assist senior team members with implementing improvements identified during the overall patch-management assessment.

Required Qualifications

• 3+ years of experience supporting Microsoft SCCM / Microsoft Configuration Manager.

• Hands-on experience with SCCM Software Updates and Windows patch management.

• Experience working with:

  • Software Update Groups

  • Automatic Deployment Rules (ADRs)

  • SCCM Collections

  • Maintenance Windows

  • Software Update Points / WSUS

  • Deployment Packages

  • Distribution Points

  • SCCM Client Health

• Experience troubleshooting failed or incomplete software-update deployments.

• Strong knowledge of Windows Server and Windows endpoint environments.

• Working knowledge of PowerShell scripting and automation.

• Experience with patch-compliance reporting and remediation.

• Understanding of enterprise change-management and patch-testing processes.

• Ability to document technical procedures and communicate issues clearly to senior engineers and management.

Preferred Qualifications

• Experience supporting financial services, banking, credit unions, or another regulated environment.

• Experience with Microsoft Intune and Entra ID.

• Familiarity with SCCM/Intune co-management.

• Working knowledge of Linux patching.

• Familiarity with vulnerability-management tools and processes.

• Experience with SQL, SSRS, or Power BI reporting.

• Understanding of PCI or other security/compliance frameworks.

• Exposure to infrastructure automation and AI-assisted IT operations.