Senior Engineer

HCLTech; Birmingham; On-site; GBP 60,000 - 90,000; Full time

Job summary

HCLTech in Birmingham is seeking a Senior Patch Management Engineer to own the patch lifecycle for the EUC estate, driving automated workflows and improving deployment reliability. You will design SCCM/MECM and Intune deployment strategies, develop PowerShell scripts, integrate vulnerability data, and collaborate with SOC to address threats.

The role requires 3–6 years in EUC, Windows patching know-how, and valid UK work authorization.

Qualifications

• 3–6 years in EUC / endpoint management
• Candidate should have valid authorization to work in UK
• B.Tech / BCA / B.Sc. (IT or Computer Science) or equivalent

Responsibilities

• Own the patch management lifecycle: assessment, testing, approval, deployment, validation, and reporting for all EUC endpoints.
• Design and maintain software update groups, collections, and deployment rules in SCCM/MECM and Microsoft Intune.
• Develop and maintain PowerShell / WMI scripts to automate patch compliance checks, remediation, and reporting.
• Act as L2 escalation for patch deployment failures, application compatibility issues, and non-compliant device investigations.
• Conduct patch testing in pilot/UAT rings before production rollout; document test results and obtain change approval.
• Integrate Qualys / Tenable vulnerability scan data to drive patch prioritisation based on CVSS scores.
• Define and enforce patching SLAs for Critical, High, Medium, and Low severity patches per security policy.
• Maintain and improve the patch management runbook, SOPs, and exception handling process.
• Collaborate with security operations (SOC) to address zero-day threats and emergency patch deployments.
• Produce monthly patch compliance reports and trend analysis for management review.
• Mentor and guide L1 analysts; review their tickets and provide technical feedback.

Skills

SCCM/MECM

Microsoft Intune

PowerShell scripting

Vulnerability management tools

Windows patching

Jamf Pro / Munki

Azure AD/Entra ID

Education

B.Tech / BCA / B.Sc. (IT or CS)

Tools

Jamf Pro

Munki

ServiceNow ITSM

CMDB

Job description

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products.

HCLTech is a globally recognized leader in the Tech and IT industry, but we’ve never forgotten the startup mindset that got us here. We’ve always approached our work with an idea-first attitude because every one of our accomplishments —no matter how big or small —can be traced back to an idea’s single spark.

It’s that spark —that inner drive —that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that’s what drives you to be better, be more and ultimately, be more fulfilled.

Candidate should have Valid authorization to work in UK

ROLE SUMMARY

The L2 Senior Patch Management Engineer owns the end-to-end patch lifecycle for the end-user computing environment. Responsibilities include designing and maintaining patching baselines, automating patch workflows, resolving complex deployment failures, and acting as an escalation point for L1 analysts. The role also involves continuous improvement of patch tooling and processes.

KEY RESPONSIBILITIES

• Own the patch management lifecycle: assessment, testing, approval, deployment, validation, and reporting for all EUC endpoints.
• Design and maintain software update groups, collections, and deployment rules in SCCM/MECM and Microsoft Intune.
• Develop and maintain PowerShell / WMI scripts to automate patch compliance checks, remediation, and reporting.
• Act as L2 escalation for patch deployment failures, application compatibility issues, and non-compliant device investigations.
• Conduct patch testing in pilot/UAT rings before production rollout; document test results and obtain change approval.
• Integrate Qualys / Tenable vulnerability scan data to drive patch prioritisation based on CVSS scores.
• Define and enforce patching SLAs for Critical, High, Medium, and Low severity patches per security policy.
• Maintain and improve the patch management runbook, SOPs, and exception handling process.
• Collaborate with security operations (SOC) to address zero-day threats and emergency patch deployments.
• Produce monthly patch compliance reports and trend analysis for management review.
• Mentor and guide L1 analysts; review their tickets and provide technical feedback.

TECHNICAL SKILLS & KNOWLEDGE

• Deep expertise in SCCM/MECM – software update point, ADRs, deployment rings, client health.
• Hands-on experience with Microsoft Intune / Autopilot / Windows Update for Business.
• Advanced PowerShell scripting for automation (compliance remediation, report extraction, deployment triggers).
• Experience with vulnerability management tools: Qualys, Tenable Nessus, or Rapid7 InsightVM.
• Knowledge of Windows OS lifecycle, patch Tuesday cycle, CBS, WUA, and WinSxS.
• Familiarity with macOS patch management (Jamf Pro / Munki) is an advantage.
• Understanding of BitLocker, Windows Defender, and endpoint security baselines (CIS / STIG).
• Experience integrating patch workflows with ServiceNow ITSM and CMDB.
• Working knowledge of Azure AD, Entra ID, and Conditional Access policies.

SOFT SKILLS & COMPETENCIES

• Strong analytical and troubleshooting skills for complex patch failures.
• Excellent documentation skills – able to produce clear SOPs, RCAs, and change records.
• Effective communicator across technical and non-technical stakeholders.
• Proactive mindset – identifies process gaps and proposes improvements.
• Ability to manage concurrent workstreams under deadline pressure.

PREFERRED CERTIFICATIONS

• CompTIA Security+ or CySA+
• ITIL 4 Managing Professional (or Foundation)
• Qualys Certified Specialist – Vulnerability Management

Experience

3 – 6 years in EUC / endpoint management

Education

B.Tech / BCA / B.Sc. (IT or Computer Science) or equivalent

Location

Birmingham B1 2JB, United Kingdom

• A supportive, diverse and global team with a brilliant culture.
• Great opportunities to make the role your own, upskill yourself and get involved with exciting projects.
• Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks – Engagement Champion to name a few.
• To know more about us visit – www.hcltech.com
• For more information on how we process your personal data, please refer to HCLTech’s Candidate Data Privacy Notice.