L1 Patch Management Analyst

HCLTech; Cary (NC); Hybrid; USD 65,000 - 90,000; Full time

Job summary

HCLTech is seeking an L1 Patch Management Analyst in a hybrid role based in Cary, NC. You will drive day-to-day patch deployment across end-user devices, coordinating with helpdesk and users to minimize disruption while ensuring compliance.

Responsibilities include deploying patches via SCCM/Intune/WSUS, monitoring dashboards, handling remediation escalations to L2, and maintaining records in ITSM systems. A solid foundation in Windows patching and scripting helps success.

Qualifications

• Experience with OS patching and deployment using SCCM/Intune/WSUS.
• Ability to monitor and report patch compliance.
• Strong coordination with end-users and Helpdesk.
• Experience with ITSM tools (ServiceNow / Jira / Remedy).
• Basic scripting (PowerShell) for patch status queries.
• Familiarity with AD and Group Policy.
• Understanding of vulnerability scanning tools (Qualys/Nessus/Tenable).

Responsibilities

• Deploy OS (Windows 10/11) and third-party patches via SCCM/Intune/WSUS per schedule.
• Monitor patch compliance dashboards and generate daily/weekly reports.
• Identify non-compliant devices and initiate remediation or escalate to L2.
• Coordinate with end-users and helpdesk to schedule patch windows with minimal disruption.
• Maintain patch deployment records and update ITSM tickets accurately.
• Perform pre-patch and post-patch health checks on targeted endpoints.
• Assist in testing patches in a non-production environment before wide deployment.
• Follow patch management SOP, CAB process, and change management guidelines.
• Support vulnerability scan tool outputs and cross-reference with missing patches.
• Escalate failed deployments or zero-day situations to L2 promptly.

Skills

Windows patching basics

SCCM/MECM/Intune/WSUS

ITSM familiarity

AD/GP basics

PowerShell basics

Vulnerability scanners awareness

Dashboards & reports

On-call readiness

Communication skills

Time management

Tools

SCCM/MECM

Microsoft Intune

WSUS

ServiceNow

Jira

Remedy

Job description

Location - Cary, NC / Jacksonville, FL - (hybrid -3 days onsite a week)

ROLE SUMMARY

The L1 Patch Management Analyst is responsible for the day-to-day execution of patch deployment activities across end-user devices including laptops, desktops, and thin clients. The role focuses on scheduling, deploying, and validating OS and application patches using enterprise patch management tooling, while escalating issues to L2 as required.

KEY RESPONSIBILITIES

• Deploy OS (Windows 10/11) and third-party application patches to end-user devices via SCCM / Microsoft Intune / WSUS as per the approved patch schedule.
• Monitor patch compliance dashboards and generate daily/weekly compliance reports.
• Identify non-compliant devices and initiate remediation actions or escalation to L2.
• Coordinate with end-users and helpdesk to schedule patch windows with minimal disruption.
• Maintain patch deployment records and update ITSM tickets (ServiceNow / Jira) accurately.
• Perform pre-patch and post-patch health checks on targeted endpoints.
• Assist in testing patches in a non-production environment before wide deployment.
• Follow the patch management SOP, CAB process, and change management guidelines.
• Support vulnerability scan tool outputs (Qualys / Tenable) and cross-reference with missing patches.
• Escalate failed deployments, critical patch failures, or zero-day situations to L2 promptly.

TECHNICAL SKILLS & KNOWLEDGE

• Basic knowledge of Windows OS (Windows 10/11) patch lifecycle and update mechanisms.
• Familiarity with SCCM/MECM, Microsoft Intune, or WSUS for endpoint patch deployment.
• Exposure to ITSM platforms - ServiceNow, Remedy, or equivalent.
• Understanding of Active Directory and Group Policy basics.
• Basic scripting exposure (PowerShell or Batch) for patch status queries.
• Awareness of vulnerability scanning tools (Qualys, Nessus, Tenable).
• Ability to read compliance and deployment reports from patch management dashboards.

SOFT SKILLS & COMPETENCIES

• Good verbal and written communication skills for coordinating with end-users.
• Ability to follow documented SOPs and checklists accurately.
• Time management - capable of handling multiple patch deployment tasks concurrently.
• Basic analytical skills to identify and report patch deployment anomalies.
• Team player with a willingness to work in shifts / on-call rotations.

PREFERRED CERTIFICATIONS

• Microsoft 365 Certified: Modern Desktop Administrator Associate (MD-100/MD-101)
• CompTIA A+ or CompTIA IT Fundamentals (ITF+)
• ITIL 4 Foundation

Compensation and Benefits

A candidate's pay within the range will depend on their skills, experience, education, and other factors permitted by law. This role may also be eligible for performance-based bonuses subject to company policies. In addition, this role is eligible for the following benefits subject to company policies: medical, dental, vision, pharmacy, life, accidental death & dismemberment, and disability insurance; employee assistance program; 401(k) retirement plan; 10 days of paid time off per year (some positions are eligible for need-based leave with no designated number of leave days per year); and 10 paid holidays per year.

Disclaimer

HCL is an equal opportunity employer, committed to providing equal employment opportunities to all applicants and employees regardless of race, religion, sex, color, age, national origin, pregnancy, sexual orientation, physical disability or genetic information, military or veteran status, or any other protected classification, in accordance with federal, state, and/or local law. Should any applicant have concerns about discrimination in the hiring process, they should provide a detailed report of those concerns to [e-mail] for investigation.