Senior SCCM Patch Management Consultant

MetroSys; United States; On-site; USD 90,000 - 140,000; Part time

Job summary

MetroSys is seeking a Senior SCCM Patch Management Consultant to support a regional credit union. The role focuses on assessing, improving, and modernizing the enterprise patch-management environment, with emphasis on Microsoft SCCM/Configuration Manager, automation, and governance.

The engagement starts with a comprehensive assessment and may extend or become permanent based on project needs. The consultant will examine architecture, deployment rings, reporting, and compliance, and will drive

Qualifications

• Experience with Microsoft SCCM / Configuration Manager in a large enterprise environment.
• Proficiency in designing and improving patch-management processes and deployment methodologies.
• Familiarity with regulated workloads (banking) and security/compliance requirements.

Responsibilities

• Conduct a comprehensive assessment of the existing SCCM environment and patch-management process.
• Review SCCM architecture, site configuration, distribution points, WSUS integration, and client health.
• Evaluate ADRs, maintenance windows, deployment schedules, and reboot policies for optimization.
• Identify coverage gaps, failed deployments, and configuration issues; propose improvements.
• Design and implement automation to reduce manual patch-management tasks (PowerShell).
• Develop dashboards, reports, and KPIs to improve patch compliance visibility.
• Coordinate with security teams to align patching with vulnerabilities and risk.

Skills

SCCM / Configuration Manager

Automation

Patch management

Enterprise IT governance

Tools

PowerShell

SCCM tools

Job description

Position Overview

MetroSys is seeking an experienced Senior SCCM Patch Management Consultant to support a regional credit union in assessing, improving, and modernizing its enterprise patch-management environment. The consultant will serve as a subject matter expert for Microsoft SCCM / Microsoft Configuration Manager , reviewing the client's current SCCM architecture, patching processes, deployment methodology, reporting, automation, and overall patch compliance. This role will begin with a comprehensive assessment of the existing environment and progress into recommendations and hands-on improvements. The consultant will identify SCCM configuration gaps, improve patching processes, increase automation, and help establish a more reliable and repeatable enterprise patch-management program. The environment is primarily Microsoft-based with some Linux infrastructure and supports banking, security, and regulated workloads. The consultant should understand the operational and compliance requirements associated with patching systems within a financial-services environment. The initial engagement is expected to last approximately three months , with the possibility of extension and/or permanent employment based on project needs.

Key Responsibilities

• Perform a comprehensive assessment of the existing SCCM / Microsoft Configuration Manager environment and enterprise patch-management process.
• Review SCCM architecture, site configuration, distribution points, Software Update Points, WSUS integration, client health, boundaries, collections, and overall platform health.
• Evaluate existing SCCM Software Update Groups, Automatic Deployment Rules (ADRs), device collections, maintenance windows, deployment schedules, and reboot policies .
• Review current Windows Server and endpoint patching processes to identify coverage gaps, failed deployments, configuration issues, and opportunities for improvement.
• Assess SCCM patch-compliance reporting and develop recommendations for improving visibility into compliant, non-compliant, failed, offline, and pending-reboot systems.
• Design or improve SCCM patching rings and deployment collections for test, pilot, production, critical infrastructure, and exception groups.
• Develop and implement SCCM automation to reduce manual patch-management activities and improve consistency.
• Utilize PowerShell and other automation technologies to improve SCCM administration, reporting, remediation, and patching workflows.
• Review existing patch testing, approval, deployment, rollback, maintenance-window, and emergency patching procedures.
• Identify opportunities to automate patch identification, deployment, validation, remediation, and compliance reporting.
• Evaluate where AI-assisted technologies could provide practical value within patch management, reporting, troubleshooting, vulnerability prioritization, or operational workflows.
• Work with security and vulnerability-management teams to align SCCM patch deployments with identified vulnerabilities and organizational risk.
• Support patching requirements across a primarily Microsoft environment , while helping establish appropriate processes for Linux and other infrastructure not directly managed through SCCM.
• Review patch-management practices against applicable banking, security, PCI, and internal compliance requirements .
• Troubleshoot SCCM client, deployment, distribution, update, and reporting issues.
• Create or improve patch-management dashboards, reports, KPIs, and audit documentation.
• Develop a prioritized SCCM and patch-management improvement roadmap.
• Implement approved SCCM configuration, automation, reporting, and process improvements during the engagement.
• Document configurations, procedures, recommendations, and operational standards and provide knowledge transfer to internal teams.

Originally posted on Himalayas