Job Summary
We are looking for an experienced Patching & Software Deployment / Device Management L2 Engineer with approximately 6 years of experience in enterprise endpoint management and IT infrastructure operations. The role will be responsible for managing and supporting Windows endpoints, executing OS and third-party application patching, deploying software packages, maintaining device compliance, and troubleshooting complex endpoint-related issues. The ideal candidate should have strong hands-on experience with technologies such as Microsoft Intune, Microsoft Configuration Manager (SCCM/MECM), Windows Update for Business, Autopilot, PowerShell, and Active Directory. The candidate will work closely with Service Desk, Security, Application, Infrastructure, and Device Management teams to maintain a secure, compliant, and reliable end-user computing environment.
Key Responsibilities
Patch Management & Compliance Plan, test, deploy, and monitor Windows OS, Microsoft application, driver, firmware, and supported third-party application patches. Monitor patch compliance and investigate failed, missing, or non-compliant devices. Support remediation activities for security vulnerabilities and critical patch requirements. Software Deployment & Application Management Package, test, deploy, update, and uninstall enterprise applications using Intune and/or SCCM/MECM. Troubleshoot failed software installations, deployment errors, detection-rule issues, dependencies, and application conflicts. Coordinate application rollouts through pilot/testing and production deployment phases. Endpoint & Device Management Manage Windows endpoints through Microsoft Intune, SCCM/MECM, Windows Autopilot, and associated endpoint-management technologies. Support device enrollment, configuration profiles, compliance policies, application assignments, and device remediation. Troubleshoot device health, synchronization, policy-application, and management-agent issues. Incident & Problem Management Provide L2 support for complex patching, software deployment, endpoint configuration, and device-management incidents escalated from L1 teams. Perform root-cause analysis for recurring deployment and compliance failures and implement corrective actions. Work within agreed incident, request, change, and SLA processes. Automation & Operational Improvement Use PowerShell and related scripting capabilities to automate repetitive endpoint-management, reporting, validation, and remediation activities. Identify opportunities to improve patch success rates, deployment reliability, device compliance, and operational efficiency. Reporting, Governance & Collaboration Track operational metrics such as patch compliance, deployment success/failure, vulnerable devices, application compliance, and remediation status. Maintain technical documentation, deployment procedures, troubleshooting guides, and knowledge articles. Coordinate with Security, Infrastructure, Application, Service Desk, and Change Management teams for enterprise-wide deployments and remediation activities.
Skill Requirements
Approximately 6 years of experience in endpoint/device management, patching, software deployment, or EUC operations. Strong hands-on knowledge of Microsoft Intune and Microsoft Configuration Manager (SCCM/MECM). Good understanding of Windows 10/11 endpoint management and Windows servicing/patch management. Experience with Windows Update for Business, Microsoft Autopilot, Entra ID/Azure AD, Active Directory, and Group Policy. Experience in application packaging, software distribution, deployment troubleshooting, and patch compliance management. Good working knowledge of PowerShell scripting and automation. Strong troubleshooting skills for application deployment failures, endpoint compliance issues, device registration/enrollment, and Windows update problems. Familiarity with ITIL processes, including Incident, Problem, Change, and Request Management. Understanding of endpoint security, vulnerability remediation, device compliance, and enterprise security standards. Experience working with enterprise ITSM platforms such as ServiceNow is advantageous. Strong analytical, documentation, communication, and stakeholder-management skills. Ability to work in a global IT operations environment, coordinating with geographically distributed technical teams and business stakeholders.
Other Requirements
Experience with Microsoft Defender for Endpoint, Windows 365/Cloud PC, Azure Virtual Desktop, remediation scripting, endpoint analytics, and modern workplace/device lifecycle management would be an added advantage.