Senior Patch Automation Engineer: EUC Lifecycle

HCLTech; Cary (NC); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Pharmacy

Life insurance

AD&D

Disability insurance

Employee assistance program

401(k) retirement plan

10 days of paid time off per year

10 paid holidays per year

Job summary

HCLTech in Cary, NC / Jacksonville, FL seeks an L2 Senior Patch Management Engineer to own the end-to-end patch lifecycle for EUC endpoints. You will design baselines, automate workflows in SCCM/MECM and Intune, and drive continuous improvement of patch tooling.

Responsibilities include troubleshooting deployment failures, integrating vulnerability data, and coordinating with SOC for urgent patches. Hybrid work with on-site days, leveraging PowerShell automation and ServiceNow ITSM integrations.

Qualifications

• End-to-end patch lifecycle ownership for EUC endpoints.
• Design and maintain software update groups, collections, and deployment rules.
• Develop and maintain PowerShell / WMI scripts for automation and reporting.
• Act as L2 escalation for patch deployment failures and compatibility issues.
• Conduct pilot/UAT testing and document results for change approval.
• Integrate vulnerability data (Qualys/Tenable/Rapid7) to drive patch prioritisation.
• Enforce patching SLAs per policy across severities.
• Maintain patch runbooks, SOPs and exception handling processes.
• Collaborate with SOC for zero-day threats and emergency deployments.
• Produce monthly patch compliance reports and trend analyses.

Responsibilities

• Own patch lifecycle: assessment, testing, approval, deployment, validation, reporting.
• Design and maintain MECM/Intune deployment rules and schedules.
• Automate patch checks, remediation, and reporting via PowerShell.
• Escalate and troubleshoot patch failures and compatibility issues.
• Test patches in pilot rings; document outcomes and obtain change approvals.
• Incorporate vulnerability data to prioritize patches.
• Define and enforce SLA for critical/high/medium/low patches.
• Maintain runbooks, SOPs and exception handling.
• Coordinate with SOC for zero-day threat responses.
• Provide monthly compliance trend analysis.

Skills

SCCM / MECM

Intune / Autopilot

PowerShell scripting

Vulnerability tools

ServiceNow ITSM

Azure AD / Entra ID

Patch lifecycle mgmt

Deployment strategies

Tools

Qualys

Tenable Nessus

Rapid7 InsightVM

Jamf Pro

Munki

CBS / WUA

Job description

HCLTech in Cary, NC / Jacksonville, FL seeks an L2 Senior Patch Management Engineer to own the end-to-end patch lifecycle for EUC endpoints. You will design baselines, automate workflows in SCCM/MECM and Intune, and drive continuous improvement of patch tooling.

Responsibilities include troubleshooting deployment failures, integrating vulnerability data, and coordinating with SOC for urgent patches. Hybrid work with on-site days, leveraging PowerShell automation and ServiceNow ITSM integrations.