Enterprise Patch Management & Vulnerability Remediation Consultant

Intone Inc; Sacramento (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Intone Inc. in Sacramento, CA, seeks an Enterprise Patch Management & Vulnerability Remediation Consultant to accelerate OS and application patching across state government environments, reduce backlogs, and automate workflows.

You will leverage MECM/SCCM, Intune, WUfB, AWS SSM, and Tenable, building dashboards and automating remediation with PowerShell, Python, and Graph API in hybrid cloud environments.

Qualifications

• Experience patching Windows across on-premises and cloud environments.
• Strong automation and scripting for patch workflows and reporting.
• Experience with vulnerability remediation and risk-based prioritization.
• Proven ability to integrate multiple security/tools ecosystems.
• Hands-on with MECM/SCCM, Intune, WUfB, and cloud patch tools.

Responsibilities

• Accelerate OS and app patching across enterprise environments.
• Automate patch management workflows and remediation processes.
• Improve SLA compliance for patch-related activities.
• Coordinate with security teams to validate patches and mitigations.
• Develop dashboards and reporting for remediation tracking.

Skills

MECM/SCCM

Intune

WUfB

Winget scripting

PowerShell

Python

GitHub Actions

CI/CD pipelines

API integrations

Tenable.io

CrowdStrike

Active Directory

Azure AD/Entra ID

GPOs

AWS SSM Patch Manager

Linux patching (YUM/APT)

Tools

AWS EC2

VMware

AWS Systems Manager

Jamf

ServiceNow

Microsoft Graph API

GitHub

CrowdStrike Falcon

Tenable

Job description

Job Description

We have a new requirement for an Enterprise Patch Management & Vulnerability Remediation Consultant supporting the State of California.

Required: Prior State Government Client Experience

Primary Focus

Accelerate OS and application patching, reduce remediation backlogs, automate patch management workflows, and improve SLA compliance across enterprise environments.

Core Technical Skills

Windows Patching Expertise

Strong experience with MECM/SCCM, including ADRs, Software Update Groups (SUGs), deployment rings, pilot groups, and server patch orchestration.

Hands-on experience with Microsoft Intune and Windows Update for Business (WUfB), including update rings, compliance policies, device readiness, and reporting.

Expertise in Winget scripting and automation for application lifecycle management.

Server & Hybrid Environment Patching

Experience patching Windows Servers in on-premises VMware and AWS EC2 environments.

Hands-on experience with AWS Systems Manager (SSM) Patch Manager, AWS Inspector, and AWS Security Hub integrations.

Experience with Linux patching using YUM and APT package managers.

Database & Middleware Patch Management

Experience applying SQL Server Cumulative Updates (CUs) and Service Packs, including dependency analysis and validation.

Knowledge of .NET Framework and .NET Runtime patching, servicing, and vulnerability remediation.

Security Tools & Integration

Experience with Tenable.io and Tenable.SC, including vulnerability analysis, prioritization, and asset correlation.

Familiarity with CrowdStrike findings and remediation workflows.

Strong experience with Microsoft Active Directory, including on-premises AD and Azure AD/Entra ID, Group Policies (GPOs), Organizational Units (OUs), and security group management.

Experience integrating APIs with Tenable, Microsoft Defender, CrowdStrike, Jamf, and ServiceNow.

Ability to develop automated dashboards, reporting solutions, and remediation tracking mechanisms.

Automation & Scripting

Expert-level PowerShell scripting for SCCM, Intune, Microsoft Graph API, and Azure AD automation.

Strong Python scripting skills for data processing, orchestration, API integrations, and cloud automation.

Experience with GitHub Actions and GitHub Copilot for workflow automation.

Experience designing CI/CD pipelines for patch testing, code quality validation, and version control.

Automation Experience Required For

Patch readiness assessment and validation

Deployment sequencing

Rollback planning and execution

Exception management

Inventory reconciliation and compliance reporting

Vulnerability Management & Technical Analysis

Strong experience analyzing vulnerabilities, assessing risk, and recommending appropriate compensating controls.

Ability to prioritize remediation efforts based on security impact, exploitability, and business risk.

Experience driving enterprise vulnerability remediation programs and improving compliance metrics.