Windows Patching Engineer (SCCM/MECM & PowerShell Automation) | NYGCI | Riyadh, Saudi Arabia

Tech Junction Ltd; Riyadh; On-site; SAR 167,000 - 279,000; Full time

Job summary

NYGCI is seeking an experienced Windows Patching Engineer to manage enterprise patching across large-scale Windows environments in Riyadh, Saudi Arabia. You will design, implement, and automate patching using SCCM/MECM, WSUS, and PowerShell, coordinating with infrastructure, security, and operations teams to minimize downtime during maintenance windows.

The role emphasizes automation, monitoring, and remediation of patch deployments, with strong troubleshooting for failures and compliance gaps

Qualifications

• Experience administering Windows Server environments in large enterprises.

Responsibilities

• Administer and maintain enterprise Windows Server environments.

Skills

Windows Server

Patching

PowerShell

MECM/SCCM

WSUS

Automation

Troubleshooting

Documentation

Communication

Tools

MECM/SCCM

WSUS

PowerShell

Azure Update Management

Job description

Job Title: Windows Patching Engineer (SCCM/MECM & PowerShell Automation) | NYGCI | Riyadh, Saudi Arabia

Recruiting Company: NYGCI

Job Location: Riyadh, Saudi Arabia

Job Type: Full-Time

Candidate Requirement: Candidates currently based in Saudi Arabia (KSA)

Nationality: Open to all nationalities currently residing in Saudi Arabia

Hiring Priority: Immediate Requirement

Environment: Large-Scale Enterprise & Production Infrastructure

Position Summary

NYGCI is seeking an experienced Windows Patching Engineer to manage and automate enterprise patch management processes across large-scale Windows environments. This role is critical in ensuring infrastructure security, compliance, system stability, and operational efficiency through effective patching, automation, monitoring, and remediation activities.

Detailed Job Description

As a Windows Patching Engineer, you will be responsible for administering and securing enterprise Windows Server environments through structured patch management and automation strategies. You will design, implement, and optimize automated patch deployment solutions using SCCM/MECM, WSUS, and PowerShell while ensuring minimal business disruption during maintenance windows. The successful candidate will work closely with infrastructure, security, operations, and change management teams to validate, deploy, and monitor Windows updates across production systems. This role requires strong troubleshooting capabilities to address patch failures, compliance gaps, and deployment challenges within mission-critical enterprise environments. The position offers an excellent opportunity to contribute to the security and reliability of a large enterprise infrastructure.

Key Responsibilities

• Administer and maintain enterprise Windows Server environments.
• Design, implement, and manage end-to-end patch management processes.
• Develop PowerShell scripts to automate patch deployment, validation, reporting, and remediation activities.
• Administer Microsoft Endpoint Configuration Manager (MECM/SCCM) and Windows Server Update Services (WSUS).
• Plan and execute monthly security, cumulative, and critical update deployments.
• Monitor patch compliance levels and ensure adherence to security standards.
• Validate patch deployments across development, test, staging, and production environments.
• Troubleshoot and resolve patch deployment failures and update-related issues.
• Perform root cause analysis and implement corrective actions for recurring patching challenges.
• Coordinate change management activities and maintenance windows with stakeholders.
• Generate operational, compliance, and audit reports related to patch management.
• Support vulnerability remediation initiatives and infrastructure hardening activities.
• Ensure minimal downtime and service impact during patch implementation.
• Collaborate with infrastructure, security, and operations teams to improve patching efficiency.

Required Qualifications & Skills

• Strong experience administering Microsoft Windows Server environments.
• Extensive hands-on experience with enterprise patch management processes.
• Advanced PowerShell scripting and automation expertise.
• Proven experience designing and implementing patch automation solutions.
• Strong knowledge of Microsoft Endpoint Configuration Manager (MECM/SCCM).
• Experience managing Windows Server Update Services (WSUS).
• Expertise in automated deployment, monitoring, validation, and reporting processes.
• Strong troubleshooting experience involving patch deployment failures and remediation.
• Deep understanding of Windows Updates, Security Updates, Cumulative Updates, and patch lifecycle management.
• Experience working in production and large-scale enterprise environments.
• Knowledge of change management processes and maintenance window planning.
• Strong analytical, troubleshooting, and problem-solving abilities.
• Excellent documentation and communication skills.

Nice-to-Have Skills

• Microsoft certifications related to Windows Server administration.
• Experience managing hybrid cloud infrastructure environments.
• Familiarity with Azure Update Management and cloud-based patching solutions.
• Experience with vulnerability management tools such as Tenable, Qualys, or Rapid7.
• Knowledge of ITIL service management practices.
• Experience integrating patch management with enterprise security and compliance programs.
• Exposure to infrastructure automation platforms and configuration management tools.

Recruitment Pro Tip

For Windows patching and infrastructure engineering roles, hiring managers look for candidates who can demonstrate measurable improvements in patch compliance, automation, and security posture. Highlight enterprise-scale environments you’ve supported, the number of servers managed, PowerShell automation projects delivered, reductions in patch deployment time, compliance improvements achieved, and your experience handling critical production patching windows with minimal downtime.