Enterprise Patch Management Specialist

• Manage and maintain the enterprise patch management lifecycle across Windows, Linux, VMware, and third-party application environments.
• Utilize Microsoft Intune and Microsoft Endpoint Configuration Manager (MECM/SCCM) to deploy, monitor, manage, and report on endpoint and server patch compliance.
• Develop and maintain patch management standards, procedures, policies, and operational documentation.
• Perform patch testing, validation, deployment, and rollback planning for operating systems and enterprise applications.
• Administer Windows Server and Windows desktop patching activities.
• Administer Linux patching across Red Hat Enterprise Linux (RHEL), Ubuntu, Rocky Linux, and CentOS environments utilizing Ansible automation.
• Manage VMware ESXi hosts, vCenter environments, and virtual infrastructure patching and upgrades.
• Deploy and maintain patches for third-party applications including Adobe, Google Chrome, Mozilla Firefox, Java, Citrix, Zoom, Oracle products, and other enterprise software.
• Leverage software packaging solutions and patch catalogs within MECM and Intune to automate software deployment and patching.
• Coordinate scheduled monthly patch cycles as well as emergency security updates.
• Identify, prioritize, and remediate vulnerabilities identified through platforms such as Qualys, Rapid7, Microsoft Defender Vulnerability Management, Tenable, or similar tools.
• Analyze vulnerability assessment results and create remediation plans based on risk and business impact.
• Maintain enterprise patch compliance in accordance with cybersecurity standards and regulatory requirements.
• Troubleshoot deployment failures and remediation issues across endpoints, servers, and virtual environments.
• Develop executive and operational reporting dashboards to track compliance and remediation metrics.
• Support audits and compliance reviews by providing documentation and evidence of patch management activities.
• Collaborate with cybersecurity teams to support vulnerability management initiatives and reduce organizational risk.
• Automate patch deployment and reporting processes using PowerShell, Bash, Python, Ansible, or similar scripting tools.
• Support response and mitigation efforts related to critical vulnerabilities and zero-day threats.
• Participate in change management processes and maintenance window planning.
• Maintain accurate records for patching exceptions, remediation tracking, and compliance reporting.

• Proven experience in enterprise patch management, systems administration, or related infrastructure support roles.
• Strong experience supporting and patching Microsoft Windows Server and Windows desktop operating systems.
• Strong experience patching Linux operating systems including RHEL, Ubuntu, Rocky Linux, and CentOS.
• Experience administering VMware ESXi and VMware vCenter environments.
• Extensive hands-on experience with Microsoft Intune and Microsoft Endpoint Configuration Manager (MECM/SCCM).
• Experience managing third-party application deployment and patching in enterprise environments.
• Experience with Windows Update for Business (WUfB) and Microsoft cloud-based update management.
• Familiarity with Microsoft Defender for Endpoint and Defender Vulnerability Management.
• Experience using vulnerability management platforms such as Qualys, Rapid7, Tenable, or similar solutions.
• Working knowledge of cybersecurity frameworks and standards including NIST CSF, NIST SP 800-53, CIS Benchmarks, and industry best practices.
• Experience supporting IT audits, regulatory compliance, and security assessments.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to collaborate effectively with technical and non-technical stakeholders.

Preferred Certifications

• Microsoft Certified: Endpoint Administrator Associate (MD-102)
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Red Hat Certified Engineer (RHCE)
• CompTIA Security+