SCCM Patch Management Specialist (FTE)

Carnation Infotech Pvt Ltd.; Hyderabad, Bengaluru; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Carnation Infotech Pvt Ltd. invites a skilled Windows Patch Management Engineer to join our IT team in Hyderabad. You will lead end-to-end patch management for Windows 10/11 using SCCM/MECM, troubleshoot client health, and ensure timely security updates across devices.

You'll develop automation with PowerShell, generate dashboards with SQL queries, SSRS, and Power BI, and collaborate with Security to strengthen endpoint compliance. 5–8 years of experience required.

Qualifications

• SCCM Current Branch administration.
• Software Update Management.
• Automatic Deployment Rules (ADR).
• Software Update Point (SUP).
• SCCM Client Health Troubleshooting.
• Distribution Point Management.
• Boundary and Boundary Group Configuration.
• Operating System Deployment (OSD).
• Windows 10/11 Patch Management.
• Monthly Cumulative Updates.
• Servicing Stack Updates.
• Feature Updates.
• Vulnerability Remediation.
• PowerShell scripting.
• SCCM remediation scripting.
• Automation of patch deployment and compliance remediation.

Responsibilities

• Lead end-to-end Windows patch management using SCCM/MECM.
• Investigate and resolve patch compliance gaps across Windows 10 and 11 devices.
• Troubleshoot SCCM client health, client registration, policy retrieval and failures.
• Analyze patching discrepancies between SCCM, CrowdStrike, and OS build reports.
• Develop and execute remediation plans for non-compliant devices.
• Perform SCCM client repair, reinstallation, and automation-based remediation.
• Review and optimize SUP, Boundary Groups, Distribution Points, CMG, deployment configurations.
• Validate deployment settings, maintenance windows, restart behaviors, and compliance evaluation.
• Create PowerShell automation scripts for patch remediation and client health recovery.
• Generate compliance dashboards and reporting using SCCM SQL queries, SSRS, and Power BI.
• Root-cause analysis for VPN, firewall, network, CMG, and device connectivity patch failures.
• Collaborate with Security teams to reduce endpoint vulnerabilities and improve compliance posture.
• Support out-of-band patch deployments and critical security updates.
• Produce executive-level reports on trends, risks, and remediation progress.
• Provide knowledge transfer and documentation of solutions implemented.

Skills

Patch management

SCCM administration

PowerShell scripting

Automation

Reporting

Tools

SCCM Current Branch

ADR

Software Update Point

OSD

Distribution Point

Boundary Groups

SCCM Client Health

SQL Queries

SSRS

Power BI

Job description

Key Responsibilities

• Lead end-to-end Windows patch management using Microsoft SCCM/MECM.
• Investigate and resolve patch compliance gaps across Windows 10 and Windows 11 devices.
• Troubleshoot SCCM client health, client registration, policy retrieval, software update scan failures, and deployment issues.
• Analyze patching discrepancies between SCCM, CrowdStrike, and OS build compliance reports.
• Develop and execute remediation plans for non-compliant devices.
• Perform SCCM client repair, reinstallation, and automation-based remediation.
• Review and optimize Software Update Point (SUP), Boundary Groups, Distribution Points, CMG, and deployment configurations.
• Validate deployment settings, maintenance windows, restart behaviors, and compliance evaluation processes.
• Create PowerShell automation scripts for patch remediation and client health recovery.
• Generate compliance dashboards and reporting using SCCM SQL queries, SSRS, and Power BI.
• Perform root-cause analysis for VPN, firewall, network, CMG, and device connectivity-related patch failures.
• Work with Security teams to reduce endpoint vulnerabilities and improve compliance posture.
• Support out-of-band patch deployments and critical security updates.
• Produce executive-level reports highlighting patching trends, risks, and remediation progress.
• Provide knowledge transfer and documentation of solutions implemented.

Mandatory Skills

SCCM / MECM

• SCCM Current Branch administration.
• Software Update Management.
• Automatic Deployment Rules (ADR).
• Software Update Point (SUP).
• SCCM Client Health Troubleshooting.
• Distribution Point Management.
• Boundary and Boundary Group Configuration.
• Operating System Deployment (OSD).

Windows Patching

• Windows 10 and Windows 11 Patch Management.
• Monthly Cumulative Updates.
• Servicing Stack Updates.
• Feature Updates.
• Vulnerability Remediation.

Automation

• PowerShell scripting.
• SCCM remediation scripting.
• Automation of patch deployment and compliance remediation.

Reporting

• SCCM SQL Queries.
• SSRS Reporting.
• Compliance Analytics.
• Power BI reporting.

Mandatory Skills: Software Distribution and Patch Mgmt .

Experience: 5-8 Years.