SCCM Patch Management Engineer

SCCM Patch Management EngineerMetroSys is seeking an experienced SCCM Patch Management Engineer to support a regional credit union's enterprise patch-management environment. This is a hands-on technical role focused on administering and improving patch deployment through Microsoft SCCM / Configuration Manager.The engineer will work alongside senior infrastructure and security resources to execute patching activities, troubleshoot deployment issues, improve SCCM configurations, automate repetitive tasks, and maintain accurate patch-compliance reporting.The environment is primarily Microsoft-based with some Linux infrastructure and supports systems operating within a regulated financial-services environment.This position is 100% onsite in Phoenix, Arizona. The initial engagement is expected to last approximately three months, with the potential for extension or permanent employment.Key ResponsibilitiesAdminister and support Microsoft SCCM / Configuration Manager with a primary focus on software updates and enterprise patch management.Create, maintain, and troubleshoot Software Update Groups, Automatic Deployment Rules (ADRs), device collections, deployment packages, and maintenance windows.Deploy Microsoft security, critical, cumulative, and other approved updates across Windows servers and endpoints.Monitor patch deployments and investigate systems reporting as failed, non-compliant, unknown, offline, or pending reboot.Troubleshoot SCCM client health, software update scanning, WSUS/SUP communication, content distribution, and deployment issues.Assist with establishing and maintaining test, pilot, and production patching groups.Support scheduled production patching and maintenance windows, including post-deployment validation and remediation.Develop and maintain PowerShell scripts and other automation to reduce repetitive SCCM administration and patch-management activities.Generate and maintain SCCM patch-compliance reports, dashboards, and operational metrics.Work with infrastructure and security teams to remediate systems with outstanding security updates and vulnerabilities.Assist with documentation of patching procedures, exceptions, deployment schedules, and technical configurations.Support audit and compliance requirements by maintaining accurate patching records and deployment evidence.Provide basic support for patching Linux or other infrastructure where required.Assist senior team members with implementing improvements identified during the overall patch-management assessment.Required Qualifications3+ years of experience supporting Microsoft SCCM / Microsoft Configuration Manager.Hands-on experience with SCCM Software Updates and Windows patch management.Experience working with Software Update Groups, Automatic Deployment Rules (ADRs), SCCM Collections, Maintenance Windows, Software Update Points / WSUS, Deployment Packages, Distribution Points, SCCM Client Health.Experience troubleshooting failed or incomplete software-update deployments.Strong knowledge of Windows Server and Windows endpoint environments.Working knowledge of PowerShell scripting and automation.Experience with patch-compliance reporting and remediation.Understanding of enterprise change-management and patch-testing processes.Ability to document technical procedures and communicate issues clearly to senior engineers and management.Preferred QualificationsExperience supporting financial services, banking, credit unions, or another regulated environment.Experience with Microsoft Intune and Entra ID.Familiarity with SCCM/Intune co-management.Working knowledge of Linux patching.Familiarity with vulnerability-management tools and processes.Experience with SQL, SSRS, or Power BI reporting.Understanding of PCI or other security/compliance frameworks.Exposure to infrastructure automation and AI-assisted IT operations.