Senior Patch & Configuration Engineer — SCCM & Azure Arc

Debevoise-&-Plimpton-LL; New York (NY); Presencial; USD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Debevoise & Plimpton LLP is seeking a System Configuration Engineer in New York to own enterprise patching and configuration management across Windows and Linux servers. You will lead SCCM and Azure Arc onboarding, develop PowerShell automation, and collaborate with Information Security to maintain security baselines.

The role reports to the Associate Director, Technology Engineering and requires strong ownership, troubleshooting, and 24x7 operational readiness in a fast-paced environment.

Formación

• Minimum 7 years of experience in enterprise systems engineering, server administration, or infrastructure operations.
• Minimum 5 years of hands‑on experience administering Microsoft Configuration Manager (SCCM) in a large enterprise environment.
• Minimum 3 years of hands‑on experience with Azure Arc‑enabled servers and hybrid server management.
• Minimum 5 years of advanced PowerShell scripting and workflow automation experience, including reusable modules, remoting, REST APIs, structured error handling, logging, testing, and secure credential handling.
• Proven experience designing and operating enterprise patching programs across Windows environments.
• Deep expertise with SCCM software update management, including WSUS, software update points, collections, automatic deployment rules, maintenance windows, distribution points, boundaries, and compliance reporting.

Responsabilidades

• Own and manage the enterprise patching program for all Windows and Linux servers, including inventory, risk prioritization, testing, scheduling, deployment, validation, remediation, and compliance reporting.
• Administer and optimize Microsoft Configuration Manager (SCCM), including software update points, WSUS, collections, automatic deployment rules, maintenance windows, distribution, compliance baselines, and reporting.
• Lead the onboarding and lifecycle management of on-premises Windows and Linux servers in Azure Arc, including agent deployment, identity, network and proxy requirements, extensions, policies, tags, RBAC, connectivity, and health monitoring.
• Use Azure Update Manager and related Azure Arc services to assess, schedule, deploy, and report updates for hybrid Windows and Linux servers.
• Develop and maintain PowerShell scripts, reusable modules, and workflow automation for onboarding, patching, configuration, compliance reporting, and automated remediation.
• Partner with the Information Security team to create, test, implement, and maintain server security baselines based on current Microsoft and vendor guidance, industry benchmarks, and firm requirements.
• Monitor patch, configuration, vulnerability, and baseline compliance; investigate failures and exceptions; coordinate remediation; and provide clear metrics to technical and business stakeholders.
• Define and enforce patching and configuration standards, change management practices, maintenance schedules, pilot procedures, rollback plans, and operational runbooks.
• Serve as the primary escalation point for complex SCCM, Azure Arc, Windows, and automation issues; maintain comprehensive documentation; and perform other duties as deemed appropriate by the Associate Director, Technology Engineering.

Conocimientos

PowerShell scripting

Azure Arc

SCCM

Windows Server

Linux administration

Automation

Vulnerability management

Change management

Documentation

On-prem to Azure Arc

Herramientas

SCCM

Azure Arc

WSUS

Azure Update Manager

GitHub Actions

Descripción del empleo

Debevoise & Plimpton LLP is seeking a System Configuration Engineer in New York to own enterprise patching and configuration management across Windows and Linux servers. You will lead SCCM and Azure Arc onboarding, develop PowerShell automation, and collaborate with Information Security to maintain security baselines.

The role reports to the Associate Director, Technology Engineering and requires strong ownership, troubleshooting, and 24x7 operational readiness in a fast-paced environment.