Windows Patching Engineer

ALIANDO; Kannur; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Health insurance

Fitness allowance

Work-from-home allowance

Paid maternity and parental leave

Generous PTO

Job summary

ALIANDO is a remote-friendly Azure Expert Managed Service provider focused on Microsoft technologies for US and international clients. The Windows Patching Engineer will plan, schedule and execute monthly and out-of-band patch cycles for Windows servers and endpoints, coordinating with clients and ensuring health before and after cycles.

The role requires 4–7 years in enterprise patch management, hands-on experience with Azure Update Manager, SCCM and WSUS, and strong PowerShell scripting.

Qualifications

• Bachelor's degree or equivalent practical experience in IT.
• 4–7 years in Windows infrastructure support with enterprise patch management.
• Experience with Azure Update Manager, SCCM and WSUS.
• Hands-on patching for third-party applications, preferably Patch My PC.
• Strong Windows Server administration and troubleshooting from logs.

Responsibilities

• Plan, schedule and execute monthly and out-of-band patch cycles across estates.
• Build ring-based deployment workflows with controlled rollouts and rollbacks.
• Coordinate maintenance with clients and confirm service health.
• Respond to critical advisories with emergency patch cycles.

Skills

Windows patch management

PowerShell scripting

Risk assessment

Education

Bachelor's degree in Computer Science or related field

Tools

Azure Update Manager

SCCM

WSUS

Intune

Patch My PC

Job description

Job Title: Windows Patching Engineer

Department: Managed services

Position Type: Full Time

Location: Remote

Company Overview:

ALIANDO, is an award-winning Azure Expert Managed Service solutions company focused on selling and deploying Microsoft technologies for U.S. and international companies. For over 20 years, Microsoft and its partners have recommended ALIANDO, for licensing, consulting, and managed services to corporations large and small. The company offers competitive pay and comprehensive employee benefits, including health insurance, fitness allowances, work-from-home allowances, paid maternity and parental leave, and generous PTO.

At ALIANDO, we aim to unleash the potential of people and technology. Our company was built around the idea that there is no success without team success. We foster a culture of inclusion and fairness where diverse interests, experiences, and backgrounds are celebrated. We strive to empower and unleash the potential of everyone to ensure that every employee has a path to success. We're in it together to make life better for each other, our customers, our partners, and our communities.

Key Responsibilities

Patch Planning and Deployment

• Plan, schedule and execute monthly and out-of-band patch cycles for Windows servers, Windows endpoints and third-party applications across all managed client estates.
• Build ring-based deployment approaches that move updates from pilot groups to production in a controlled sequence, with defined pause and rollback criteria.
• Coordinate maintenance windows with clients and application owners, and confirm service health before and after each cycle.
• Respond to critical vulnerability advisories with emergency patch cycles, working with the security team to prioritise by risk and exposure.

Platform Administration

• Administer Azure Update Manager, including maintenance configurations, dynamic scopes, assessment schedules and periodic assessment for Azure and Arc-enabled servers.
• Manage Microsoft Configuration Manager (SCCM) software update points, automatic deployment rules, update groups, deployment packages, maintenance windows and collection targeting.
• Administer WSUS, including product and classification selection, approvals, synchronisation, computer group structure, declining superseded updates and routine database maintenance.
• Operate Patch My PC for third-party application patching and packaging, keeping the application catalogue current and validating publishing into Configuration Manager or Intune.
• Maintain client-side update health, including Windows Update client configuration, Group Policy settings, content distribution and agent remediation.

Compliance, Troubleshooting and Reporting

• Track patch compliance against agreed targets, investigate failed and pending installations, and remediate systematically rather than machine by machine.
• Troubleshoot update failures from Windows Update, Configuration Manager and WSUS logs, and resolve recurring causes at source.
• Produce monthly patch compliance reporting for service delivery managers and client stakeholders, with clear commentary on exceptions and planned remediation.
• Conduct root cause analysis on recurring patch failures and drive permanent fixes through the problem management process.

Service Delivery, Automation and Documentation

• Raise, own and close change records for every patch cycle, with tested implementation and rollback plans.
• Handle incidents and service requests within agreed SLA targets, keeping ticket records accurate and current.
• Automate reporting, remediation and routine health checks using PowerShell, and contribute reusable scripts to the team's automation library.
• Maintain runbooks and as-built documentation so that the service desk can act confidently on first contact, and mentor junior engineers on patching practice.
• Participate in the on-call rotation and support out-of-hours maintenance windows, which is where the majority of patching work is delivered.

Required Qualifications

• Bachelor's degree in computer science, information technology or engineering, or equivalent practical experience.
• Four to seven years in Windows infrastructure support, with at least three years focused on enterprise patch management.
• Hands-on administration experience with Azure Update Manager, Microsoft Configuration Manager (SCCM) software updates, and WSUS.
• Practical experience with third-party application patching, ideally using Patch My PC.
• Strong Windows Server administration skills, including Active Directory, Group Policy and the Windows Update client, with confident troubleshooting of update failures from logs.
• Working PowerShell scripting ability for reporting and bulk remediation.
• Experience working to formal ITIL processes for incident, problem and change management within a ticketing platform such as Jira Service Management or ServiceNow.
• Willingness to work rotational shifts and scheduled maintenance windows, including nights and weekends, as part of a 24x7 support roster.
• Clear written and spoken English, with confidence in client-facing communication.

Preferred Qualifications

• Microsoft certification such as AZ-800, AZ-801, AZ-104 or MD-102.
• Experience with Microsoft Intune for update rings, Windows Autopatch, or co-managed workload configuration.
• Familiarity with vulnerability management tooling such as Microsoft Defender Vulnerability Management, Qualys or Tenable, and with mapping findings to patch cycles.
• Experience patching clustered and highly available workloads such as failover clusters, SQL Server or Exchange.
• Experience supporting multiple customer environments for a managed services or outsourcing provider.
• ITIL 4 Foundation certification.

ALIANDO is an equal-opportunity employer committed to Diversity, Inclusion & Belonging. Individuals seeking employment at ALIANDO are considered without regard to any protected category, including but not limited to race, color, religion, national origin, age, sex, marital status, ancestry, disability, veteran status, gender identity, or sexual orientation.