Patching Engineer

Xtium; United States; Remote; USD 80,000 - 110,000; Full time

Job summary

XTIUM is seeking a Patch Management Operations Specialist to lead patching across Windows endpoints and servers, ensuring compliance and minimal disruption. You will drive end-to-end patch cycles, coordinate maintenance windows, and collaborate with security and IT teams to align remediation efforts.

You will leverage RMM platforms (N-able, NinjaOne, SCCM/MECM) to manage deployments, validate agent health, and generate detailed reports for customers and internal stakeholders.

Qualifications

• Hands-on experience administering endpoint and/or server patch management.
• Experience using RMM or endpoint management platforms; N-able preferred.
• Knowledge of Windows patching concepts, maintenance windows, and vulnerability remediation.
• Experience troubleshooting patching failures across endpoints and servers.
• Ability to analyze patch compliance data and develop remediation plans.
• Familiarity with change management processes.

Responsibilities

• Execute recurring patching activities across Windows endpoints and servers.
• Review patch applicability, stage approved deployments, coordinate outage windows, and execute patching activities with rollback and risk considerations.
• Troubleshoot patch deployment failures including agent health, detection issues, and reboot handling.
• Produce patch and compliance reporting for internal teams and customers.
• Maintain documentation and knowledge articles for repeatable patch operations.”
• Operate within RMM and endpoint tooling platforms to support patch deployment and remediation workflows.
• Deploy and support RMM agents and related tooling across Windows environments.
• Troubleshoot common endpoint tooling issues, including enrollment state and device targeting problems.
• Document work clearly in tickets, change logs, customer notes, and internal procedures.

Skills

Patch management

RMM platforms

Intune

Active Directory

Troubleshooting

Documentation

Tools

N-able

NinjaOne

Kaseya

SCCM/MECM

Automox

Microsoft Intune

Job description

The XTIUM global team is made up of a group of diverse and talented professionals who are all driven by the same goal: excellence and continuous improvement. We are all about embracing challenges, keeping the lines of communication open and working together. We take ownership of our work, focus on learning and growing and hold ourselves accountable to our colleagues and customers. Together, we strive to push boundaries, make an impact and inspire each other to reach our full potential.

Job Description:

Key Responsibilities

Patch Management Operations

• Execute recurring patching activities across Windows endpoints and servers, including scan/remediation, deployment scheduling, maintenance windows, and post-deployment validation.
• Review patch applicability, stage approved deployments, coordinate outage windows, and execute patching activities with appropriate rollback and risk considerations.
• Troubleshoot patch deployment failures, including agent health, detection issues, missing prerequisites, content/download issues, reboot handling, and deployment timing.
• Produce patch and compliance reporting for internal teams and customers, including compliance status, exceptions, overdue items, failed deployments, and remediation plans.
• Maintain documentation and knowledge articles for repeatable patch operations, known issues, and customer‑specific procedures.

RMM / Endpoint Tooling Support

• Operate within RMM and endpoint management platforms to support patch deployment, agent health, device targeting, reporting, and remediation workflows.
• Deploy, manage, and support RMM agents and related endpoint management tooling across Windows environments.
• Support agent deployment and validation using tools such as Microsoft Intune, Active Directory, and group‑based targeting methods.
• Troubleshoot common endpoint tooling issues, including agent installation failures, policy conflicts, enrollment state, permissions issues, and device targeting problems.
• Maintain sufficient working knowledge of Intune and AD to support endpoint management and patching operations.

Process, Governance, and Collaboration

• Participate in change management processes to plan and execute patch events with minimal service disruption.
• Coordinate patch schedules, customer maintenance windows, stakeholder notifications, validation steps, and post‑change reporting.
• Work with security, vulnerability management, and operations teams on prioritized remediation, risk‑based patching, exceptions, and escalations.
• Support continuous improvement by helping standardize patch rings, reduce deployment failure rates, improve reporting accuracy, and streamline operational runbooks.
• Document work clearly in tickets, change logs, customer notes, and internal procedures.

Required Qualifications

• Hands‑on experience administering endpoint and/or server patch management in an enterprise or managed services environment.
• Experience using RMM or endpoint management platforms for patch deployment, agent health validation, compliance reporting, and remediation workflows; N‑able experience is strongly preferred.
• Working knowledge of Windows patching concepts, including monthly patch cycles, cumulative updates, reboots, maintenance windows, supersedence, failed update remediation, and vulnerability‑driven patching.
• Experience troubleshooting patching failures across endpoints and servers.
• Ability to analyze patch compliance data and develop remediation plans for non‑compliant systems.
• Working knowledge of change management processes and executing maintenance activities within approved windows.
• Basic‑to‑intermediate Active Directory experience related to device/user targeting, group membership, OU/GPO awareness, and deployment support.
• Basic‑to‑intermediate Microsoft Intune experience related to app deployment, enrollment state, assignment validation, and basic troubleshooting.
• Strong operational discipline, including documentation, change control, communication, and execution of work in controlled maintenance windows.

Preferred Qualifications

• 2 to 4 years of experience with Nable patching operations.
• Experience with other RMM or patching platforms such as NinjaOne, Kaseya, SCCM/MECM, or Automox.
• Linux patching experience, including package managers, repository configuration, kernel updates, agent updates, and reboot coordination.
• Experience working with ITSM platforms for incidents, changes, tasks, approvals, and audit evidence.
• Familiarity with patch strategy concepts such as patch rings, pilot groups, phased rollout, exception handling, and compliance reporting.
• Experience supporting managed services customers or multi‑tenant operational environments.

Core Competencies

• Patch operations execution excellence: precise, repeatable, and low‑error execution.
• Strong troubleshooting and root‑cause analysis skills.
• Clear written and verbal communication.
• Customer and service mindset.
• Security‑mindful approach to vulnerability remediation, least privilege, and audit readiness.
• Ability to follow documented processes while identifying opportunities to improve them.
  Remote