Windows Patching Engineer

Job Description: Windows Patching Engineer

Role Overview: We are looking for an experienced Windows Patching Engineer with approximately 5 years of expertise in managing patch deployment, automation, and compliance across enterprise-scale Windows environments. The role requires strong knowledge of Windows Server administration, WSUS/SCCM patching, security compliance, and troubleshooting.

Key Responsibilities

• Patch Management
• Plan, schedule, and deploy patches across Windows servers and workstations.
• Apply Microsoft security updates and cumulative patches in line with vendor advisories.
• Maintain rollback and recovery strategies for failed patches.
• Automation & Tools
• Manage patching through WSUS, SCCM, Intune, or third-party patching tools.
• Automate patch deployment and compliance reporting.
• Develop scripts in PowerShell for patch validation and reporting.
• Security & Compliance
• Prioritize and apply patches for critical CVEs and zero-day vulnerabilities.
• Ensure compliance with industry standards (ISO, PCI-DSS, HIPAA).
• Document patching activities for audits and governance.

Troubleshooting

• Diagnose and resolve patch-related issues (failed installations, service disruptions).
• Collaborate with application teams to validate post-patch functionality.
• Perform root cause analysis for patch failures.
• Monitoring & Reporting
• Generate compliance reports for management and auditors.
• Track patch deployment success rates and exceptions.
• Maintain dashboards for patch status across environments.

Required Skills & Experience

• 5+ years of Windows Server administration experience.
• Strong knowledge of Windows patching workflows using WSUS, SCCM, or Intune.
• Hands-on experience with PowerShell scripting for automation.
• Familiarity with rollback strategies (uninstall updates, system restore, snapshots).
• Knowledge of security compliance frameworks and vulnerability management.
• Strong troubleshooting and analytical skills.

Preferred Qualifications

• Experience with cloud patching (Azure Update Management, AWS Systems Manager).
• Familiarity with endpoint patching (Windows 10/11, Intune).
• Exposure to CI/CD pipelines for automated patching.
• Certifications: MCSA, MCSE, Microsoft Certified: Windows Server Hybrid Administrator Associate.