Windows Patching Engineer

ALIANDO; India; Hybrid; INR 1,200,000 - 2,100,000; Full time

Benefits offered by this job

Health insurance

Fitness allowances

Work-from-home allowances

Paid maternity and parental leave

Generous PTO

Job summary

ALIANDO is seeking a Windows patch management specialist to plan and deploy monthly and emergency patches across client estates. You will manage Azure Update Manager, SCCM, WSUS, and third-party patching, while ensuring update health and policy compliance.

The role requires 4–7 years in Windows infrastructure, strong PowerShell skills, ITIL-aligned incident/change management, and readiness for night/weekend shifts in a 24x7 support roster. Hybrid work arrangements offered.

Qualifications

• Bachelor's degree in computer science, information technology or engineering, or equivalent practical experience.
• 4–7 years in Windows infrastructure support, with at least 3 years on enterprise patch management.
• Hands-on admin with Azure Update Manager, SCCM, and WSUS.
• Experience patching third-party apps, ideally Patch My PC.
• Strong Windows Server admin skills and troubleshooting from logs.
• PowerShell scripting for reporting/remediation.
• Experience with ITIL processes in Jira Service Management or ServiceNow.
• Willingness to rotate shifts including nights/weekends.

Responsibilities

• Plan, schedule and execute monthly and out-of-band patch cycles for Windows servers/endpoints across client estates.
• Build ring-based deployment approaches with defined rollback criteria.
• Coordinate maintenance windows with clients and confirm service health.
• Respond to critical advisories with emergency patch cycles in collaboration with security team.
• Administer Azure Update Manager, SCCM software updates, WSUS, and WSUS configurations.
• Maintain client-side update health and GPO settings; manage Intune if applicable.
• Automate reporting and remediation with PowerShell; maintain runbooks and documentation.
• Participate in on-call rotation and after-hours maintenance windows.

Skills

Windows infrastructure

Azure Update Manager

SCCM

WSUS

Patch My PC

PowerShell

ITIL processes

Ticketing tools (Jira Service Mgmt //)

English communication

Night/weekend shift readiness

Education

Bachelor's degree in CS/IT/Engineering

Tools

Azure Update Manager

SCCM

WSUS

Patch My PC

PowerShell

Jira Service Management

ServiceNow

Microsoft Intune

Job description

ALIANDO, is an award-winning Azure Expert Managed Service solutions company focused on selling and deploying Microsoft technologies for U.S. and international companies. For over 20 years, Microsoft and its partners have recommended ALIANDO, for licensing, consulting, and managed services to corporations large and small. The company offers competitive pay and comprehensive employee benefits, including health insurance, fitness allowances, work-from-home allowances, paid maternity and parental leave, and generous PTO.

At ALIANDO, we aim to unleash the potential of people and technology. Our company was built around the idea that there is no success without team success. We foster a culture of inclusion and fairness where diverse interests, experiences, and backgrounds are celebrated. We strive to empower and unleash the potential of everyone to ensure that every employee has a path to success. We're in it together to make life better for each other, our customers, our partners, and our communities.

Key Responsibilities

Patch Planning and Deployment

• Plan, schedule and execute monthly and out-of-band patch cycles for Windows servers, Windows endpoints and third-party applications across all managed client estates.
• Build ring-based deployment approaches that move updates from pilot groups to production in a controlled sequence, with defined pause and rollback criteria.
• Coordinate maintenance windows with clients and application owners, and confirm service health before and after each cycle.
• Respond to critical vulnerability advisories with emergency patch cycles, working with the security team to prioritise by risk and exposure.

Platform Administration

• Administer Azure Update Manager, including maintenance configurations, dynamic scopes, assessment schedules and periodic assessment for Azure and Arc-enabled servers.
• Manage Microsoft Configuration Manager (SCCM) software update points, automatic deployment rules, update groups, deployment packages, maintenance windows and collection targeting.
• Administer WSUS, including product and classification selection, approvals, synchronisation, computer group structure, declining superseded updates and routine database maintenance.
• Operate Patch My PC for third-party application patching and packaging, keeping the application catalogue current and validating publishing into Configuration Manager or Intune.
• Maintain client-side update health, including Windows Update client configuration, Group Policy settings, content distribution and agent remediation.

Compliance, Troubleshooting and Reporting

• Track patch compliance against agreed targets, investigate failed and pending installations, and remediate systematically rather than machine by machine.
• Troubleshoot update failures from Windows Update, Configuration Manager and WSUS logs, and resolve recurring causes at source.
• Produce monthly patch compliance reporting for service delivery managers and client stakeholders, with clear commentary on exceptions and planned remediation.
• Conduct root cause analysis on recurring patch failures and drive permanent fixes through the problem management process.

Service Delivery, Automation and Documentation

• Raise, own and close change records for every patch cycle, with tested implementation and rollback plans.
• Handle incidents and service requests within agreed SLA targets, keeping ticket records accurate and current.
• Automate reporting, remediation and routine health checks using PowerShell, and contribute reusable scripts to the team's automation library.
• Maintain runbooks and as-built documentation so that the service desk can act confidently on first contact, and mentor junior engineers on patching practice.
• Participate in the on-call rotation and support out-of-hours maintenance windows, which is where the majority of patching work is delivered.

Required Qualifications

• Bachelor's degree in computer science, information technology or engineering, or equivalent practical experience.
• Four to seven years in Windows infrastructure support, with at least three years focused on enterprise patch management.
• Hands-on administration experience with Azure Update Manager, Microsoft Configuration Manager (SCCM) software updates, and WSUS.
• Practical experience with third-party application patching, ideally using Patch My PC.
• Strong Windows Server administration skills, including Active Directory, Group Policy and the Windows Update client, with confident troubleshooting of update failures from logs.
• Working PowerShell scripting ability for reporting and bulk remediation.
• Experience working to formal ITIL processes for incident, problem and change management within a ticketing platform such as Jira Service Management or ServiceNow.
• Willingness to work rotational shifts and scheduled maintenance windows, including nights and weekends, as part of a 24x7 support roster.
• Clear written and spoken English, with confidence in client-facing communication.

Preferred Qualifications

• Microsoft certification such as AZ-800, AZ-801, AZ-104 or MD-102.
• Experience with Microsoft Intune for update rings, Windows Autopatch, or co-managed workload configuration.
• Familiarity with vulnerability management tooling such as Microsoft Defender Vulnerability Management, Qualys or Tenable, and with mapping findings to patch cycles.
• Experience patching clustered and highly available workloads such as failover clusters, SQL Server or Exchange.
• Experience supporting multiple customer environments for a managed services or outsourcing provider.

ALIANDO is an equal-opportunity employer committed to Diversity, Inclusion & Belonging. Individuals seeking employment at ALIANDO are considered without regard to any protected category, including but not limited to race, color, religion, national origin, age, sex, marital status, ancestry, disability, veteran status, gender identity, or sexual orientation.