Sys Admin - Patching / SCCM

Patching / SCCM Administrator

The Patching / SCCM Administrator will provide Tier III IT operations support across the Office of Information Management (OIM) and SC mission systems, with a focus on endpoint management, patching, and compliance. This role is responsible for operating and maintaining Microsoft Endpoint Configuration Manager (SCCM), Intune, and related patching infrastructure, ensuring timely updates, secure baselines, and compliance with DOE directives. The ideal candidate will have strong expertise in Windows desktop/server patching, automation, and reporting, while supporting hybrid environments and evolving enterprise service delivery models.

Responsibilities include:

• Plan, schedule, and deploy Windows OS and application patches across servers and endpoints in accordance with OIM policy.
• Validate patch compliance against secure configuration baselines and DOE directives.
• Perform pre- and post-patch testing, documenting results and mitigating issues.
• Maintain patch deployment records, including maintenance logs, validation history, and compliance reports.
• Collaborate with cybersecurity teams to remediate vulnerabilities identified through patching gaps.
• Administer and maintain Microsoft Endpoint Configuration Manager (SCCM), including collections, deployments, task sequences, and reporting.
• Support Microsoft Intune for mobile device and modern endpoint management.
• Develop and maintain automation scripts (PowerShell, Azure CLI) to streamline patching and endpoint management tasks.
• Manage software distribution, OS imaging, and application packaging for enterprise endpoints.
• Monitor SCCM infrastructure health, including site servers, distribution points, and SQL databases.
• Continuously monitor patch compliance, endpoint health, and SCCM infrastructure performance.
• Generate and deliver compliance reports to leadership and stakeholders.
• Track and report on capacity utilization, resource consumption, and licensing compliance.
• Detect and resolve patching failures, bottlenecks, and outages in line with SLAs.
• Maintain and update the Configuration Management Database (CMDB) with patching and endpoint configuration items.
• Submit all patching changes via the OIM-approved change management system in accordance with the Change Control Review (CCR) process.
• Evaluate proposed changes for technical and cybersecurity risk, ensuring compliance with secure baselines.
• Maintain documentation of patching SOPs, SCCM configurations, and endpoint policies, reviewed quarterly or after major changes.

Minimum Qualifications:

• Bachelor's Degree in Information Technology, Computer Science or a related field or equivalent relevant experience; Master's Degree preferred.

• Demonstrated technical proficiency equivalent to industry-recognized certifications, such as:

• Microsoft Certified: Endpoint Administrator Associate
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• CompTIA Security+ or Network+
• Vendor-specific certifications in endpoint security or patch management platforms
• Proficiency in PowerShell scripting, SCCM administration, and automation tools.
• 7-10 years of experience in information technology, systems administration or other IT related field.

Other Job Specific Skills:

• Strong knowledge of Windows OS patching, SCCM infrastructure, Intune, and compliance frameworks.
• Ability to support Windows, macOS, and Linux endpoints as required.
• Experience with hybrid endpoint management (SCCM + Intune).
• Familiarity with vulnerability management tools (e.g., Tenable, Qualys) and integration with patching workflows.
• Strong troubleshooting skills for patch deployment failures, SCCM infrastructure issues, and endpoint compliance gaps.
• Excellent documentation and communication skills for compliance reporting and operational transparency.

Compensation Ranges:

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements:

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements:

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer:

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.