Patch & Compliance Engineer: Windows Server & Endpoints

Ampcus Inc; Jersey City (NJ); On-site; USD 110,000 - 140,000; Full time

Job summary

Ampcus Inc. is seeking a Windows Server & Endpoint Patch Management Engineer to lead patching across large enterprise environments from Jersey City, NJ. You will drive vulnerability remediation, testing, deployment, and governance, partnering with Cyber Security and Infrastructure teams.

The role emphasizes automation through scripting, change management, and reporting, ensuring compliance and operational excellence across Windows Server and endpoint platforms.

Qualifications

• Expert knowledge of Windows Server administration and patch management.
• Strong experience with Windows 10/11 endpoint environments.
• Hands-on experience with enterprise patch management platforms (MECM/SCCM, Intune, WSUS, Tanium, BigFix or equivalent).
• Strong PowerShell scripting and automation skills.
• Experience with vulnerability management, remediation tracking, and compliance reporting.
• Strong understanding of ITIL Change, Incident, Problem, and Release Management processes.
• Experience in highly regulated enterprise environments such as Banking, Financial Services, or Healthcare.

Responsibilities

• Lead monthly, emergency, and zero-day patch deployment activities for Windows Servers and endpoints.
• Assess, test, validate, deploy, and verify patches for security and infrastructure.
• Perform pre- and post-patch health checks, compliance validation, troubleshooting, and rollback activities.
• Coordinate remediation with Cyber Security, Infrastructure, and Applications teams.
• Administer and maintain patching platforms and deployment infrastructure.
• Manage patch lifecycle activities, deployment schedules, maintenance windows, and remediation tracking.
• Perform root cause analysis for patch failures and coordinate corrective actions.
• Support automation of patch deployment and validation via scripting and tooling.
• Monitor endpoint deployment success, compliance, and remediation status.
• Drive Change Management activities, approvals, deployment planning, and stakeholder communications.
• Produce patch compliance dashboards and progress reports; present to leadership.

Skills

Windows Server administration

Endpoint management (Win10/11)

PowerShell automation

Vulnerability remediation & compliance

ITIL Change/Release/Incident

Enterprise patch management

Regulated environments (Banking/FS/HE)

Tools

MECM/SCCM

Intune

WSUS

Tanium

BigFix

Job description

Ampcus Inc. is seeking a Windows Server & Endpoint Patch Management Engineer to lead patching across large enterprise environments from Jersey City, NJ. You will drive vulnerability remediation, testing, deployment, and governance, partnering with Cyber Security and Infrastructure teams.

The role emphasizes automation through scripting, change management, and reporting, ensuring compliance and operational excellence across Windows Server and endpoint platforms.