Endpoint Configuration and Patch Engineer

Job Summary

The Endpoint Configuration and Patch Engineer manages patching, configuration compliance, and security baselines across a large-scale endpoint and local server environment. The role focuses on maintaining secure and compliant devices while aligning patching activities with the operational requirements of an academic environment.

Key Responsibilities

Plan, test, and deploy Windows OS and third-party application patches through a defined monthly patching cycle.

Monitor and maintain patch compliance and drive remediation of non-compliant devices across 573 locations.

Schedule patching activities around the academic calendar, examination freeze periods, and school holidays.

Manage configuration baselines, hardening standards, and configuration drift detection.

Coordinate emergency and out-of-band patching for critical vulnerabilities in collaboration with the Security function.

Desired Candidate Profile

Qualifications

• Hands-on experience with patch management tools such as Microsoft Intune, WSUS, SCCM/MECM, and third-party patching platforms.
• Strong understanding of vulnerability-to-patch mapping, CVE analysis, and risk-based prioritisation.
• Experience managing configuration baselines, security hardening, and CIS benchmarks.
• Strong PowerShell scripting skills for compliance reporting, automation, and remediation.
• Bachelor s degree in information technology, Computer Science, or a related discipline.