War Room Endpoint Patch & Vulnerability Admin

EY; Taguig; On-site; PHP 5,653,000 - 9,422,000; Full time

Job summary

EY is seeking an EndPoint Infrastructure Patching & Vulnerability Management Administrator to own the end-to-end patching lifecycle for ~450 SCCM/AppProxy servers across environments, including vulnerability remediation and validation. The role requires hands-on patching, coordination with SCCM/Proxy engineering, and active participation in change management and war room operations.

The successful candidate will manage patch windows, validate deployments, and drive closure of findings, with

Qualifications

• Hands-on experience administering and patching SCCM/APPPROXY server infrastructure (CAS, Primary Sites, site system roles) in a large enterprise estate.
• Strong Windows Server administration skills (multi-domain Active Directory) including patching, restart sequencing and post-patch validation.
• Working knowledge of SQL Server as an SCCM/APPPROXY prerequisite — applying CU/GDR updates and understanding site-database criticality and Always On / HA concepts.

Responsibilities

• Execute monthly, accelerated and emergency patching across the ~450 SCCM/AppProxy servers (non-production first, then production).
• Sequence patching so Windows/SQL work completes before SCCM/APPPROXY patching; perform and validate restarts within windows.
• Apply Microsoft SCCM/APPPROXY hotfixes and SQL Server CU/GDR updates as prerequisites, coordinating around SQL site databases to avoid taking a whole site down.
• Support High-Availability failover patching (patch passive node/SQL replica, switch active/passive, patch former active).

Skills

SCCM administration

Windows Server

SQL Server

Change management

War Room/on-call

Job description

EY is seeking an EndPoint Infrastructure Patching & Vulnerability Management Administrator to own the end-to-end patching lifecycle for ~450 SCCM/AppProxy servers across environments, including vulnerability remediation and validation. The role requires hands-on patching, coordination with SCCM/Proxy engineering, and active participation in change management and war room operations.

The successful candidate will manage patch windows, validate deployments, and drive closure of findings, with