SCCM Patch Management Engineer

Position Overview

MetroSys is seeking an experienced SCCM Patch Management Engineer to support a regional credit union's enterprise patch-management environment. This is a hands-on technical role focused on administering and improving patch deployment through Microsoft SCCM / Configuration Manager.

The engineer will work alongside senior infrastructure and security resources to execute patching activities, troubleshoot deployment issues, improve SCCM configurations, automate repetitive tasks, and maintain accurate patch-compliance reporting.

The environment is primarily Microsoft-based with some Linux infrastructure and supports systems operating within a regulated financial-services environment.

This position is 100% onsite in Phoenix, Arizona. The initial engagement is expected to last approximately three months, with the potential for extension or permanent employment.

Key Responsibilities

• Administer and support Microsoft SCCM / Configuration Manager with a primary focus on software updates and enterprise patch management.
• Create, maintain, and troubleshoot Software Update Groups, Automatic Deployment Rules (ADRs), device collections, deployment packages, and maintenance windows.
• Deploy Microsoft security, critical, cumulative, and other approved updates across Windows servers and endpoints.
• Monitor patch deployments and investigate systems reporting as failed, non-compliant, unknown, offline, or pending reboot.
• Troubleshoot SCCM client health, software update scanning, WSUS/SUP communication, content distribution, and deployment issues.
• Assist with establishing and maintaining test, pilot, and production patching groups.
• Support scheduled production patching and maintenance windows, including post-deployment validation and remediation.
• Develop and maintain PowerShell scripts and other automation to reduce repetitive SCCM administration and patch-management activities.
• Generate and maintain SCCM patch-compliance reports, dashboards, and operational metrics.
• Work with infrastructure and security teams to remediate systems with outstanding security updates and vulnerabilities.
• Assist with documentation of patching procedures, exceptions, deployment schedules, and technical configurations.
• Support audit and compliance requirements by maintaining accurate patching records and deployment evidence.
• Provide basic support for patching Linux or other infrastructure where required.
• Assist senior team members with implementing improvements identified during the overall patch-management assessment.

Required Qualifications

• 3+ years of experience supporting Microsoft SCCM / Microsoft Configuration Manager.

• Hands-on experience with SCCM Software Updates and Windows patch management.

• Experience working with:

  • Software Update Groups
  • Automatic Deployment Rules (ADRs)
  • SCCM Collections
  • Maintenance Windows
  • Software Update Points / WSUS
  • Deployment Packages
  • Distribution Points
  • SCCM Client Health

• Experience troubleshooting failed or incomplete software-update deployments.

• Strong knowledge of Windows Server and Windows endpoint environments.

• Working knowledge of PowerShell scripting and automation.

• Experience with patch-compliance reporting and remediation.

• Understanding of enterprise change-management and patch-testing processes.

• Ability to document technical procedures and communicate issues clearly to senior engineers and management.

Preferred Qualifications

• Experience supporting financial services, banking, credit unions, or another regulated environment.
• Experience with Microsoft Intune and Entra ID.
• Familiarity with SCCM/Intune co-management.
• Working knowledge of Linux patching.
• Familiarity with vulnerability-management tools and processes.
• Experience with SQL, SSRS, or Power BI reporting.
• Understanding of PCI or other security/compliance frameworks.
• Exposure to infrastructure automation and AI-assisted IT operations.