Endpoint Patch & Compliance Lead

HKS, Inc; Dallas (TX); On-site; USD 120,000 - 150,000; Full time

Job summary

HKS, Inc. is seeking an experienced patch management lead to oversee the monthly patch cycle for Windows, macOS, Windows Server, and firmware across the enterprise. You will manage deployment rings, coordinate testing, and ensure timely remediation across 2,500 devices and 28 locations.

The role requires strong PowerShell scripting, MEM/Intune expertise, SCCM/MECM co-management, and collaboration with security to address CVEs and ensure ITIL-aligned compliance.

Qualifications

• 6+ years of experience in enterprise patch management.
• 4+ years administering Microsoft Intune in production.
• Advanced competency with MEM technologies (Intune, Autopilot, Azure Arc, Azure AD).
• Experience with SCCM/MECM co-management with Intune.
• Scripting for automation: PowerShell; MS Graph and bash/zsh preferred.

Responsibilities

• Owns monthly patch cycle for Windows and macOS endpoints and Windows Server.
• Designs deployment rings and coordinates tests for monthly patches.
• Patches third-party applications via Intune or patch management tool.
• Manages firmware, driver, and BIOS updates for devices.
• Meets remediation SLAs for CVEs and reports on compliance and drift.
• Collaborates with security on scan findings and remediation planning.
• Onboards and manages servers in Azure Arc for update management.
• Maintains SCCM/Intune co-management and device baselines.

Skills

Endpoint patch management

Intune administration

SCCM/MECM experience

PowerShell scripting

Vulnerability remediation

ITIL change management

Education

B.A./B.S. in CS or related field

Tools

Intune

SCCM/MECM

Azure Arc

Microsoft Graph

PowerShell

Bash/zsh

Autopilot

Azure AD

Job description

HKS, Inc. is seeking an experienced patch management lead to oversee the monthly patch cycle for Windows, macOS, Windows Server, and firmware across the enterprise. You will manage deployment rings, coordinate testing, and ensure timely remediation across 2,500 devices and 28 locations.

The role requires strong PowerShell scripting, MEM/Intune expertise, SCCM/MECM co-management, and collaboration with security to address CVEs and ensure ITIL-aligned compliance.