<p>We're looking for an experienced <strong>Senior Microsoft Endpoint & Patch Management Engineer</strong> to support a large-scale modernization of enterprise patch management infrastructure.</p><p><br></p><p>This individual will play a key role in transforming how Windows servers, desktops, laptops, and mobile devices are managed, updated, and secured. The focus will be on migrating legacy patch management processes to modern Microsoft cloud-based solutions, improving automation, strengthening security compliance, and reducing patch deployment timelines.</p><p><br></p><p><strong>Key Responsibilities</strong></p><ul><li>Lead the migration from Windows Server Update Services (WSUS) to Azure Update Manager.</li><li>Assess, design, and implement automated patch management solutions using Microsoft Intune and Windows Autopatch.</li><li>Modernize patching processes across Windows servers, desktops, laptops, and iOS devices.</li><li>Develop strategies to reduce patch deployment windows and improve vulnerability remediation timelines.</li><li>Evaluate and implement device compliance policies and Microsoft Entra ID Conditional Access controls.</li><li>Design and document technical solutions, including architecture, implementation plans, and operational procedures.</li><li>Present proposed infrastructure changes to the Change Advisory Board (CAB) and execute approved solutions.</li><li>Establish automated patch compliance monitoring, reporting, and remediation processes.</li><li>Expand patch management capabilities to include application patching and updates.</li><li>Collaborate with infrastructure, application, and security teams to minimize operational disruptions and ensure service availability following patch deployments.</li></ul><p><br></p>