SCCM Patch Management Engineer

Position Overview

MetroSys is seeking an experienced SCCM Patch Management Engineer to support a regional credit union's enterprise patch-management environment. This is a hands-on technical role focused on administering and improving patch deployment through Microsoft SCCM / Configuration Manager .

The engineer will work alongside senior infrastructure and security resources to execute patching activities, troubleshoot deployment issues, improve SCCM configurations, automate repetitive tasks, and maintain accurate patch-compliance reporting.

The environment is primarily Microsoft-based with some Linux infrastructure and supports systems operating within a regulated financial-services environment.

This position is 100% onsite in Phoenix, Arizona . The initial engagement is expected to last approximately three months, with the potential for extension or permanent employment.

Key Responsibilities

- Administer and support Microsoft SCCM / Configuration Manager with a primary focus on software updates and enterprise patch management.
- Create, maintain, and troubleshoot Software Update Groups, Automatic Deployment Rules (ADRs), device collections, deployment packages, and maintenance windows .
- Deploy Microsoft security, critical, cumulative, and other approved updates across Windows servers and endpoints.
- Monitor patch deployments and investigate systems reporting as failed, non-compliant, unknown, offline, or pending reboot.
- Troubleshoot SCCM client health, software update scanning, WSUS/SUP communication, content distribution, and deployment issues.
- Assist with establishing and maintaining test, pilot, and production patching groups .
- Support scheduled production patching and maintenance windows, including post-deployment validation and remediation.
- Develop and maintain PowerShell scripts and other automation to reduce repetitive SCCM administration and patch-management activities.
- Generate and maintain SCCM patch-compliance reports, dashboards, and operational metrics.
- Work with infrastructure and security teams to remediate systems with outstanding security updates and vulnerabilities.
- Assist with documentation of patching procedures, exceptions, deployment schedules, and technical configurations.
- Support audit and compliance requirements by maintaining accurate patching records and deployment evidence.
- Provide basic support for patching Linux or other infrastructure where required.
- Assist senior team members with implementing improvements identified during the overall patch-management assessment.

Required Qualifications

- 3+ years of experience supporting Microsoft SCCM / Microsoft Configuration Manager .
- Hands-on experience with SCCM Software Updates and Windows patch management .
- Experience working with:

Software Update Groups
- Automatic Deployment Rules (ADRs)
- SCCM Collections
- Maintenance Windows
- Software Update Points / WSUS
- Deployment Packages
- Distribution Points
- SCCM Client Health

- Experience troubleshooting failed or incomplete software-update deployments.
- Strong knowledge of Windows Server and Windows endpoint environments .
- Working knowledge of PowerShell scripting and automation .
- Experience with patch-compliance reporting and remediation.
- Understanding of enterprise change-management and patch-testing processes.
- Ability to document technical procedures and communicate issues clearly to senior engineers and management.

Preferred Qualifications

- Experience supporting financial services, banking, credit unions, or another regulated environment .
- Experience with Microsoft Intune and Entra ID.
- Familiarity with SCCM/Intune co-management.
- Working knowledge of Linux patching.
- Familiarity with vulnerability-management tools and processes.
- Experience with SQL, SSRS, or Power BI reporting.
- Understanding of PCI or other security/compliance frameworks.
- Exposure to infrastructure automation and AI-assisted IT operations.