Lead Endpoint Patch & Security Engineer

HKS INC; Dallas (TX); On-site; USD 110,000 - 140,000; Full time

Job summary

HKS INC in Dallas, TX seeks an experienced patch and update management lead to oversee the monthly cycle for Windows, macOS, Windows Server, and firmware across ~2,500 devices in 28 locations. The role relies on Intune and MEM tooling, deployment rings, and test coordination.

You will remediate critical CVEs, manage device configurations, and collaborate with security to ensure compliance, drift reporting, and timely updates. Travel may be required.

Qualifications

• B.A./B.S. degree in Computer Science or related field or equivalent work experience.
• 6+ years of experience, 4+ years administering Microsoft Intune in a production enterprise environment.
• Advanced competency of Microsoft Endpoint Management technologies (MEM) including Intune, Autopilot, Azure Arc, Azure AD.
• Strong familiarity with CVE scoring, vulnerability scanners, and remediation SLA reporting.

Responsibilities

• Owns the monthly patch cycle for Windows and macOS endpoints and Windows Server designs.
• Maintains deployment rings (pilot, early adopter, broad) and coordinates tests for monthly patch publication.
• Patches third-party applications through Intune or patch management tools and manages firmware/BIOS updates.
• Meets remediation SLAs for critical/high CVEs and coordinates out-of-band patching; reports compliance and drift.
• Administers Intune across Windows, macOS, iOS/iPadOS and Android; handles enrollment and CA inputs.
• Onboards and manages Azure Arc servers to extend update management to on-premises and cloud.
• Maintains SCCM/MECM co-management and drives cloud native adoption; builds dashboards for leadership.

Skills

Intune

PowerShell

Microsoft Graph

Autopilot

Azure Arc

Azure AD

SCCM/MECM

Bash/zsh

Education

Bachelor's degree in Computer Science or related field

Tools

Intune

Autopilot

Azure Arc

Azure AD

SCCM/MECM

Microsoft Graph

Job description

HKS INC in Dallas, TX seeks an experienced patch and update management lead to oversee the monthly cycle for Windows, macOS, Windows Server, and firmware across ~2,500 devices in 28 locations. The role relies on Intune and MEM tooling, deployment rings, and test coordination.

You will remediate critical CVEs, manage device configurations, and collaborate with security to ensure compliance, drift reporting, and timely updates. Travel may be required.