Patching Engineer – Windows Endpoint & Server Patch Management

About the role

We are looking for a Patching Engineer to lead patch management operations across Windows endpoints and servers. The role involves planning, deploying, validating, and reporting on patches while ensuring high compliance and minimal service disruption.

Key responsibilities

• Execute recurring patching activities, including scanning, remediation, scheduling, and post‑deployment validation for Windows devices.
• Review patch applicability, stage approved deployments, coordinate outage windows, and manage rollback and risk considerations.
• Troubleshoot deployment failures such as agent health issues, missing prerequisites, content download problems, and reboot handling.
• Produce compliance and exception reports for internal teams and customers.
• Maintain documentation, knowledge articles, and customer‑specific procedures.
• Operate within RMM and endpoint management platforms to support agent health, device targeting, and remediation workflows.
• Deploy, manage, and support RMM agents and related tooling using Microsoft Intune, Active Directory, and group‑based targeting.
• Participate in change management processes, coordinating schedules, stakeholder notifications, validation steps, and post‑change reporting.
• Collaborate with security, vulnerability management, and operations teams on risk‑based patching and escalations.

Required profile

• Hands‑on experience with Windows patch management lifecycle, from assessment to post‑change reporting.
• Familiarity with RMM platforms such as N‑able; experience with Ivanti/LANDesk is a plus.
• Knowledge of Microsoft Intune and Active Directory for endpoint tooling deployment.
• Understanding of Linux patching and vulnerability‑driven remediation is advantageous.

Required skills

• Windows operating systems
• Patch Management
• N‑able (or comparable RMM platform)
• Ivanti/LANDesk
• Microsoft Intune
• Active Directory
• Linux patching