Senior EUC Patch Engineer - Automation & Compliance

HCLTech; Birmingham; On-site; GBP 60,000 - 90,000; Full time

Job summary

HCLTech in Birmingham is seeking a Senior Patch Management Engineer to own the patch lifecycle for the EUC estate, driving automated workflows and improving deployment reliability. You will design SCCM/MECM and Intune deployment strategies, develop PowerShell scripts, integrate vulnerability data, and collaborate with SOC to address threats.

The role requires 3–6 years in EUC, Windows patching know-how, and valid UK work authorization.

Qualifications

• 3–6 years in EUC / endpoint management
• Candidate should have valid authorization to work in UK
• B.Tech / BCA / B.Sc. (IT or Computer Science) or equivalent

Responsibilities

• Own the patch management lifecycle: assessment, testing, approval, deployment, validation, and reporting for all EUC endpoints.
• Design and maintain software update groups, collections, and deployment rules in SCCM/MECM and Microsoft Intune.
• Develop and maintain PowerShell / WMI scripts to automate patch compliance checks, remediation, and reporting.
• Act as L2 escalation for patch deployment failures, application compatibility issues, and non-compliant device investigations.
• Conduct patch testing in pilot/UAT rings before production rollout; document test results and obtain change approval.
• Integrate Qualys / Tenable vulnerability scan data to drive patch prioritisation based on CVSS scores.
• Define and enforce patching SLAs for Critical, High, Medium, and Low severity patches per security policy.
• Maintain and improve the patch management runbook, SOPs, and exception handling process.
• Collaborate with security operations (SOC) to address zero-day threats and emergency patch deployments.
• Produce monthly patch compliance reports and trend analysis for management review.
• Mentor and guide L1 analysts; review their tickets and provide technical feedback.

Skills

SCCM/MECM

Microsoft Intune

PowerShell scripting

Vulnerability management tools

Windows patching

Jamf Pro / Munki

Azure AD/Entra ID

Education

B.Tech / BCA / B.Sc. (IT or CS)

Tools

Jamf Pro

Munki

ServiceNow ITSM

CMDB

Job description

HCLTech in Birmingham is seeking a Senior Patch Management Engineer to own the patch lifecycle for the EUC estate, driving automated workflows and improving deployment reliability. You will design SCCM/MECM and Intune deployment strategies, develop PowerShell scripts, integrate vulnerability data, and collaborate with SOC to address threats.

The role requires 3–6 years in EUC, Windows patching know-how, and valid UK work authorization.