Patching/SCCM Administrator

Position Overview

The Patching / SCCM Administrator will provide Tier III IT operations support across the Office of Information Management (OIM) and SC mission systems, with a focus on endpoint management, patching, and compliance. This role is responsible for operating and maintaining Microsoft Endpoint Configuration Manager (SCCM), Intune, and related patching infrastructure, ensuring timely updates, secure baselines, and compliance with DOE directives. The ideal candidate will have strong expertise in Windows desktop/server patching, automation, and reporting, while supporting hybrid environments and evolving enterprise service delivery models.

Key Responsibilities

Patch Management: 

• Plan, schedule, and deploy Windows OS and application patches across servers and endpoints in accordance with OIM policy.
• Validate patch compliance against secure configuration baselines and DOE directives.
• Perform pre- and post-patch testing, documenting results and mitigating issues.
• Maintain patch deployment records, including maintenance logs, validation history, and compliance reports.
• Collaborate with cybersecurity teams to remediate vulnerabilities identified through patching gaps.

SCCM / Endpoint Administration:

• Administer and maintain Microsoft Endpoint Configuration Manager (SCCM), including collections, deployments, task sequences, and reporting.
• Support Microsoft Intune for mobile device and modern endpoint management.
• Develop and maintain automation scripts (PowerShell, Azure CLI) to streamline patching and endpoint management tasks.
• Manage software distribution, OS imaging, and application packaging for enterprise endpoints.
• Monitor SCCM infrastructure health, including site servers, distribution points, and SQL databases.

Monitoring & Compliance:

• Continuously monitor patch compliance, endpoint health, and SCCM infrastructure performance.
• Generate and deliver compliance reports to leadership and stakeholders.
• Track and report on capacity utilization, resource consumption, and licensing compliance.
• Detect and resolve patching failures, bottlenecks, and outages in line with SLAs.

Configuration Management & Change Control:

• Maintain and update the Configuration Management Database (CMDB) with patching and endpoint configuration items.
• Submit all patching changes via the OIM-approved change management system in accordance with the Change Control Review (CCR) process.
• Evaluate proposed changes for technical and cybersecurity risk, ensuring compliance with secure baselines.
• Maintain documentation of patching SOPs, SCCM configurations, and endpoint policies, reviewed quarterly or after major changes.

Required Qualifications

• 5 years with BS/BA; 3 years with MS/MA; 0 years with PhD
• Demonstrated technical proficiency equivalent to industry-recognized certifications, such as:
  • Microsoft Certified: Endpoint Administrator Associate
  • Microsoft Certified: Windows Server Hybrid Administrator Associate
  • CompTIA Security+ or Network+
  • Vendor-specific certifications in endpoint security or patch management platforms
• Proficiency in PowerShell scripting, SCCM administration, and automation tools.
• Strong knowledge of Windows OS patching, SCCM infrastructure, Intune, and compliance frameworks.
• Ability to support Windows, macOS, and Linux endpoints as required.
• Must be a US Citizen able to obtain an agency clearance.

Desired Skills

• Experience with hybrid endpoint management (SCCM + Intune).
• Familiarity with vulnerability management tools (e.g., Tenable, Qualys) and integration with patching workflows.
• Strong troubleshooting skills for patch deployment failures, SCCM infrastructure issues, and endpoint compliance gaps.
• Excellent documentation and communication skills for compliance reporting and operational transparency.