Senior Endpoint & Patch Management Engineer

HKS, Inc.; Dallas (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

HKS, Inc. is seeking an experienced Patch and Endpoint Management Lead to own the monthly patch cycle for Windows, macOS, Windows Server, and firmware across ~2,500 devices in 28 locations, spanning Azure and on‑prem workloads.

You will design deployment rings, coordinate testing, apply CVE remediation, and ensure compliance across the enterprise. You will manage Intune, SCCM/MECM co‑management, Autopilot, Azure Arc, and device configurations, partner with security, and implement automation

Qualifications

• Bachelor's degree in a computer science or related field or equivalent work experience

Responsibilities

• Owns the monthly patch cycle for Windows and macOS endpoints and Windows Server
• Designs and maintains deployment rings (pilot, early adopter, broad) with test groups
• Patches third‑party applications and manages firmware, drivers, and BIOS updates
• Meets remediation SLAs for CVEs and executes emergency patching when needed
• Partners with the security team on findings and remediation planning
• Maintains QA methodology for packages, patches, and configuration changes
• Administers Intune across Windows, macOS, iOS/iPadOS, and Android
• Onboards and manages servers in Azure Arc to extend update and configuration management
• Maintains SCCM/Intune co‑management and drives cloud native adoption
• Writes and maintains policies and standards for patching and device configuration
• Automates operational work using PowerShell, Graph, and bash/zsh
• Builds patch compliance and device health dashboards for IT leadership
• Supports change requests and communicates maintenance windows and rollback plans
• Assists application owners with packaging, deployment, and patching
• Supports service desk on escalated endpoint issues and after‑hours incidents
• Ensures compliance with security, regulatory and regional requirements
• Keeps up with industry trends to improve operations

Skills

Intune

PowerShell

Microsoft Graph

Azure Arc

Autopilot

Azure AD

SCCM/MECM

Patch management

Education

B.A./B.S. in Computer Science or related field

Tools

Intune

Autopilot

Azure Arc

Azure AD

Job description

HKS, Inc. is seeking an experienced Patch and Endpoint Management Lead to own the monthly patch cycle for Windows, macOS, Windows Server, and firmware across ~2,500 devices in 28 locations, spanning Azure and on‑prem workloads.

You will design deployment rings, coordinate testing, apply CVE remediation, and ensure compliance across the enterprise. You will manage Intune, SCCM/MECM co‑management, Autopilot, Azure Arc, and device configurations, partner with security, and implement automation