Endpoint Configuration and Patch Engineer

Client of Alpha Data Recruitment; Abu Dhabi; On-site; AED 140,000 - 210,000; Full time

Job summary

Client of Alpha Data Recruitment is seeking an Endpoint Configuration and Patch Engineer to manage patching configuration compliance and security baselines across a large-scale endpoint and local server environment in an academic setting.

The role focuses on maintaining secure devices, coordinating patch cycles, ensuring vulnerability remediation, and aligning activities with operational requirements.

Qualifications

• Hands-on experience with patch management tools such as Microsoft Intune, WSUS, SCCM/MECM, and third-party patching platforms.
• Strong understanding of vulnerability-to-patch mapping, CVE analysis, and risk-based prioritisation.
• Experience managing configuration baselines, security hardening, and CIS benchmarks.
• Strong PowerShell scripting skills for compliance reporting, automation, and remediation.
• Bachelor's degree in information technology, Computer Science, or a related discipline.

Responsibilities

• Plan test and deploy Windows OS and third-party application patches through a defined monthly patching cycle.
• Monitor and maintain patch compliance and drive remediation of non-compliant devices across 573 locations.
• Schedule patching activities around the academic calendar examination freeze periods and school holidays.
• Manage configuration baselines hardening standards and configuration drift detection.
• Coordinate emergency and out-of-band patching for critical vulnerabilities in collaboration with the Security function.

Skills

Patch management

Vulnerability mapping

CIS benchmarks

PowerShell scripting

Education

Bachelor's degree

Tools

Microsoft Intune

WSUS

SCCM/MECM

third-party patching tools

Job description

Job SummaryThe Endpoint Configuration and Patch Engineer manages patching configuration compliance and security baselines across a large-scale endpoint and local server environment The role focuses on maintaining secure and compliant devices while aligning patching activities with the operational requirements of an academic environment

Key Responsibilities

• Plan test and deploy Windows OS and third-party application patches through a defined monthly patching cycle
• Monitor and maintain patch compliance and drive remediation of non-compliant devices across 573 locations
• Schedule patching activities around the academic calendar examination freeze periods and school holidays
• Manage configuration baselines hardening standards and configuration drift detection
• Coordinate emergency and out-of-band patching for critical vulnerabilities in collaboration with the Security function

Qualifications

• Hands-on experience with patch management tools such as Microsoft Intune, WSUS, SCCM/MECM, and third-party patching platforms.
• Strong understanding of vulnerability-to-patch mapping, CVE analysis, and risk-based prioritisation.
• Experience managing configuration baselines, security hardening, and CIS benchmarks.
• Strong PowerShell scripting skills for compliance reporting, automation, and remediation.
• Bachelor s degree in information technology, Computer Science, or a related discipline.