Azure Arc SCCM Patch Engineer

Debevoise & Plimpton LLP; New York (NY); On-site; USD 140,000 - 180,000; Full time

Job summary

Debevoise & Plimpton LLP in New York seeks a System Configuration Engineer to lead the firm's enterprise patching and configuration management for Windows and Linux servers. You will administer Microsoft Configuration Manager (SCCM), oversee on‑premises server onboarding via Azure Arc, and build PowerShell automation to improve security and reliability.

You will partner with Information Security to establish server baselines, monitor compliance, and provide metrics to stakeholders in a

Qualifications

• Seven years of enterprise systems engineering or infrastructure operations experience.
• Five+ years hands-on SCCM administration in a large enterprise environment.
• Three+ years Azure Arc-enabled server experience.
• Five+ years PowerShell scripting and automation experience with modules, remoting, REST APIs, logging and secure credentials.
• Proven experience designing and operating enterprise patching programs across Windows environments.
• Experience developing and enforcing server configuration and security baselines with Information Security.

Responsibilities

• Own and manage the enterprise patching program for Windows and Linux servers including inventory, risk prioritization, testing, scheduling, deployment, validation, remediation and compliance reporting.
• Administer and optimize Microsoft Configuration Manager (SCCM) including software update points, WSUS, collections, automatic deployment rules, maintenance windows, distribution, compliance baselines, and reporting.
• Lead onboarding and lifecycle management of on-premises Windows and Linux servers in Azure Arc including agent deployment, identity, network, extensions, policies, RBAC and health monitoring.
• Use Azure Update Manager and related Azure Arc services to assess, schedule, deploy, and report updates for hybrid Windows and Linux servers.
• Develop and maintain PowerShell scripts, reusable modules, and workflow automation for onboarding, patching, configuration, compliance reporting, and automated remediation.
• Partner with Information Security to create, test, implement, and maintain server security baselines based on Microsoft and vendor guidance and firm requirements.
• Monitor patch, configuration, vulnerability and baseline compliance; investigate failures; coordinate remediation; and provide clear metrics to stakeholders.
• Define and enforce patching and configuration standards, change management, maintenance schedules, pilot procedures, rollback plans and runbooks.
• Serve as escalation point for complex SCCM, Azure Arc, Windows and automation issues; maintain documentation; and perform other duties as needed.

Skills

SCCM administration

Azure Arc

PowerShell scripting

Windows Server

Linux administration

Automation workflows

Security baselines

Patch management

RBAC & IAM

SCCM reporting

Tools

SCCM

WSUS

Azure Arc

PowerShell

SQL/SSRS

Power BI

GitHub Actions

VMware

Job description

Debevoise & Plimpton LLP in New York seeks a System Configuration Engineer to lead the firm's enterprise patching and configuration management for Windows and Linux servers. You will administer Microsoft Configuration Manager (SCCM), oversee on‑premises server onboarding via Azure Arc, and build PowerShell automation to improve security and reliability.

You will partner with Information Security to establish server baselines, monitor compliance, and provide metrics to stakeholders in a