Job description
Position Overview
MetroSys is seeking an experienced Senior SCCM Patch Management Consultant to support a regional credit union in assessing, improving, and modernizing its enterprise patch-management environment.
The consultant will serve as a subject matter expert for Microsoft SCCM / Microsoft Configuration Manager, reviewing the client's current SCCM architecture, patching processes, deployment methodology, reporting, automation, and overall patch compliance.
This role will begin with a comprehensive assessment of the existing environment and progress into recommendations and hands-on improvements. The consultant will identify SCCM configuration gaps, improve patching processes, increase automation, and help establish a more reliable and repeatable enterprise patch-management program.
The environment is primarily Microsoft-based with some Linux infrastructure and supports banking, security, and regulated workloads. The consultant should understand the operational and compliance requirements associated with patching systems within a financial-services environment.
The initial engagement is expected to last approximately three months, with the possibility of extension and/or permanent employment based on project needs.
Key Responsibilities
Perform a comprehensive assessment of the existing SCCM / Microsoft Configuration Manager environment and enterprise patch-management process.
Review SCCM architecture, site configuration, distribution points, Software Update Points, WSUS integration, client health, boundaries, collections, and overall platform health.
Evaluate existing SCCM Software Update Groups, Automatic Deployment Rules (ADRs), device collections, maintenance windows, deployment schedules, and reboot policies.
Review current Windows Server and endpoint patching processes to identify coverage gaps, failed deployments, configuration issues, and opportunities for improvement.
Assess SCCM patch-compliance reporting and develop recommendations for improving visibility into compliant, non-compliant, failed, offline, and pending-reboot systems.
Design or improve SCCM patching rings and deployment collections for test, pilot, production, critical infrastructure, and exception groups.
Develop and implement SCCM automation to reduce manual patch-management activities and improve consistency.
Utilize PowerShell and other automation technologies to improve SCCM administration, reporting, remediation, and patching workflows.
Review existing patch testing, approval, deployment, rollback, maintenance-window, and emergency patching procedures.
Identify opportunities to automate patch identification, deployment, validation, remediation, and compliance reporting.
Evaluate where AI-assisted technologies could provide practical value within patch management, reporting, troubleshooting, vulnerability prioritization, or operational workflows.
Work with security and vulnerability-management teams to align SCCM patch deployments with identified vulnerabilities and organizational risk.
Support patching requirements across a primarily Microsoft environment, while helping establish appropriate processes for Linux and other infrastructure not directly managed through SCCM.
Review patch-management practices against applicable banking, security, PCI, and internal compliance requirements.
Troubleshoot SCCM client, deployment, distribution, update, and reporting issues.
Create or improve patch-management dashboards, reports, KPIs, and audit documentation.
Develop a prioritized SCCM and patch-management improvement roadmap.
Implement approved SCCM configuration, automation, reporting, and process improvements during the engagement.
Document configurations, procedures, recommendations, and operational standards and provide knowledge transfer to internal teams.
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.