Endpoint Management Lead: Image & Patch Automation

Lavu Tech Solutions; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Lavu Tech Solutions in Cheras, Kuala Lumpur is seeking an experienced IT Deployment Specialist with 8-10+ years to lead image creation and deployment for enterprise endpoints.

You will manage gold image maintenance, automate deployment with SCCM, Intune, MDT, and Mob MDM/Workspace One, and run monthly and emergency patch cycles with security collaboration.

Strong troubleshooting, dashboards, and process improvement to ensure patch compliance across all devices.

Qualifications

• 8-10+ years of experience in enterprise device deployment/patching
• Experience with application packaging and deployment
• Experience with patch management cycles (monthly, emergency, out-of-band)

Responsibilities

• Manage gold image creation, maintenance, and standardization for enterprise endpoints.
• Perform OS image deployment for new devices and device refresh programs.
• Ensure automation of image deployment using SCCM, Intune, or MDT.
• Plan and execute patch management cycles (monthly, emergency, and out-of-band patches).
• Monitor and ensure OS and application patch compliance across all endpoints.
• Validate patches through testing, pilot groups, and controlled rollout strategies.
• Troubleshoot and resolve deployment and patching failures/issues.
• Maintain patching dashboards, reporting, and compliance metrics.
• Collaborate with security teams to address vulnerabilities and critical updates.
• Drive continuous improvement and optimization in deployment and patching processes.

Skills

Image deployment

Patch management

Automation

Tools

SCCM

Intune

Workspace ONE

MDM

MDT

Job description

Lavu Tech Solutions in Cheras, Kuala Lumpur is seeking an experienced IT Deployment Specialist with 8-10+ years to lead image creation and deployment for enterprise endpoints.

You will manage gold image maintenance, automate deployment with SCCM, Intune, MDT, and Mob MDM/Workspace One, and run monthly and emergency patch cycles with security collaboration.

Strong troubleshooting, dashboards, and process improvement to ensure patch compliance across all devices.