About the role
Position Overview
MetroSys is seeking an experienced SCCM Patch Management Engineer to support a regional credit union's enterprise patch-management environment. This is a hands-on technical role focused on administering and improving patch deployment through Microsoft SCCM / Configuration Manager.
The engineer will work alongside senior infrastructure and security resources to execute patching activities, troubleshoot deployment issues, improve SCCM configurations, automate repetitive tasks, and maintain accurate patch-compliance reporting.
The environment is primarily Microsoft-based with some Linux infrastructure and supports systems operating within a regulated financial-services environment.
This position is 100% onsite in Phoenix, Arizona. The initial engagement is expected to last approximately three months, with the potential for extension or permanent employment.
Key Responsibilities
* Administer and support Microsoft SCCM / Configuration Manager with a primary focus on software updates and enterprise patch management.
* Create, maintain, and troubleshoot Software Update Groups, Automatic Deployment Rules (ADRs), device collections, deployment packages, and maintenance windows.
* Deploy Microsoft security, critical, cumulative, and other approved updates across Windows servers and endpoints.
* Monitor patch deployments and investigate systems reporting as failed, non-compliant, unknown, offline, or pending reboot.
* Troubleshoot SCCM client health, software update scanning, WSUS/SUP communication, content distribution, and deployment issues.
* Assist with establishing and maintaining test, pilot, and production patching groups.
* Support scheduled production patching and maintenance windows, including post-deployment validation and remediation.
* Develop and maintain PowerShell scripts and other automation to reduce repetitive SCCM administration and patch-management activities.
* Generate and maintain SCCM patch-compliance reports, dashboards, and operational metrics.
* Work with infrastructure and security teams to remediate systems with outstanding security updates and vulnerabilities.
* Assist with documentation of patching procedures, exceptions, deployment schedules, and technical configurations.
* Support audit and compliance requirements by maintaining accurate patching records and deployment evidence.
* Provide basic support for patching Linux or other infrastructure where required.
* Assist senior team members with implementing improvements identified during the overall patch-management assessment.
Required Qualifications
* 3+ years of experience supporting Microsoft SCCM / Microsoft Configuration Manager.
* Hands-on experience with SCCM Software Updates and Windows patch management.
* Experience working with: * Software Update Groups * Automatic Deployment Rules (ADRs) * SCCM Collections * Maintenance Windows * Software Update Points / WSUS * Deployment Packages * Distribution Points * SCCM Client Health
* Experience troubleshooting failed or incomplete software-update deployments.
* Strong knowledge of Windows Server and Windows endpoint environments.
* Working knowledge of PowerShell scripting and automation.
* Experience with patch-compliance reporting and remediation.
* Understanding of enterprise change-management and patch-testing processes.
* Ability to document technical procedures and communicate issues clearly to senior engineers and management.
Preferred Qualifications
* Experience supporting financial services, banking, credit unions, or another regulated environment.
* Experience with Microsoft Intune and Entra ID.
* Familiarity with SCCM/Intune co-management.
* Working knowledge of Linux patching.
* Familiarity with vulnerability-management tools and processes.
* Experience with SQL, SSRS, or Power BI reporting.
* Understanding of PCI or other security/compliance frameworks.
* Exposure to infrastructure automation and AI-assisted IT operations.