## Job Summary We are looking for an experienced Patching & Software Deployment / Device Management Engineer with around 10 years of experience in enterprise endpoint management, software distribution, patch management, and end-user computing operations. The role will be responsible for managing and governing the end-to-end patching and software deployment lifecycle across enterprise devices, ensuring security compliance, operational stability, and high deployment success rates. The candidate should have strong hands-on experience with Microsoft Intune, Microsoft Configuration Manager (SCCM/MECM), Windows Autopilot, Windows Update for Business, PowerShell, Active Directory, and Microsoft Entra ID. The ideal candidate will also provide technical leadership for complex device-management issues, drive automation and continuous improvement, coordinate vulnerability remediation, and work closely with Security, Infrastructure, Service Desk, Application, and Change Management teams in a global IT environment. ##

Key Responsibilities
Patch Management & Vulnerability Remediation Own and manage the end-to-end patching lifecycle for Windows endpoints, including OS updates, Microsoft applications, drivers, firmware, and supported third-party applications. Coordinate testing, pilot deployment, production rollout, compliance monitoring, and remediation of failed patches. Work closely with Security and Vulnerability Management teams to remediate critical and high-risk vulnerabilities within agreed timelines. Software Packaging & Deployment Manage enterprise software packaging, application testing, deployment, upgrades, and removal using Microsoft Intune and SCCM/MECM. Troubleshoot complex application deployment failures, dependencies, detection-rule issues, conflicts, and installation problems. Develop structured deployment approaches covering testing, pilot groups, phased production rollout, monitoring, and rollback planning. Enterprise Device Management Administer and support large-scale Windows endpoint environments using Intune, SCCM/MECM, Autopilot, Microsoft Entra ID, Active Directory, and Group Policy. Manage device enrollment, configuration profiles, compliance policies, application assignments, update policies, and endpoint configurations. Investigate and remediate device-health, synchronization, enrollment, compliance, and configuration issues.



Technical Leadership & Escalation Management Act as a senior technical escalation point for complex patching, software deployment, and device-management incidents. Provide technical guidance and troubleshooting support to L1/L2 teams and other EUC support functions. Lead root-cause analysis for recurring deployment, patching, and compliance failures and drive permanent corrective actions. Automation & Continuous Improvement Develop and maintain PowerShell scripts and automation solutions for patching, software deployment, compliance validation, reporting, and device remediation. Identify automation opportunities to reduce manual effort and improve deployment reliability and operational efficiency. Standardize operational processes and maintain technical runbooks and knowledge documentation. Compliance, Reporting & Governance Monitor and report KPIs such as patch compliance, deployment success/failure rates, vulnerable endpoints, device compliance, remediation status, and recurring failures. Support audit and security requirements by maintaining appropriate evidence and operational records. Participate in operational reviews and provide remediation plans for compliance gaps and service risks. Change & Release Coordination Coordinate large-scale patch and application deployments through established Change and Release Management processes. Assess deployment risks, dependencies, business impact, rollback requirements, and implementation readiness. Partner with application owners and business stakeholders to minimize user and operational disruption. Stakeholder & Vendor Coordination Collaborate with Service Desk, Cybersecurity, Infrastructure, Network, Application, Asset Management, and Device Lifecycle Management teams. Coordinate with technology vendors where required for complex product defects, deployment failures, or technical escalations. Provide clear technical and operational updates to service management and leadership stakeholders.



## Skill Requirements Around 10 years of experience in enterprise endpoint management, patch management, software deployment, EUC, or workplace technology operations. Advanced hands-on knowledge of Microsoft Intune and Microsoft Configuration Manager (SCCM/MECM). Strong experience managing Windows 10/11 enterprise endpoints. Experience with Windows Autopilot, Microsoft Entra ID, Active Directory, Group Policy, and Windows Update for Business. Solid knowledge of application packaging, software distribution, patch deployment, deployment rings, compliance management, and troubleshooting. Experience in security patching and endpoint vulnerability remediation. Strong PowerShell scripting and automation capabilities. Experience troubleshooting complex device enrollment, software deployment, update, policy, and endpoint compliance issues. Good understanding of endpoint security technologies and integration with platforms such as Microsoft Defender for Endpoint. Strong understanding of ITIL practices, including Incident, Problem, Change, Release, and Request Management. Experience with enterprise ITSM platforms such as ServiceNow is desirable. Strong analytical and problem-solving capabilities, including root-cause analysis and trend analysis. Ability to create and maintain technical documentation, SOPs, operational runbooks, knowledge articles, and deployment plans. Strong communication and stakeholder-management skills, with experience working across global and geographically distributed IT teams. Ability to mentor junior engineers and provide technical direction during major deployments and complex incidents. ## Must Have Skill Client Life Cycle Management (CLM),Microsoft Intune,Microsoft Systems Management Server (SMS),MS Enterprise Mobility Suite (EMS) ## Good to Have Skill ## Other Requirements Experience with Microsoft Defender for Endpoint, Windows 365, Azure Virtual Desktop, Endpoint Analytics, and proactive remediation. Knowledge of device lifecycle management, asset management, hardware refresh, and modern workplace technologies. Experience supporting large enterprise environments with global users and multiple business units. Exposure to endpoint security baselines, configuration hardening, compliance reporting, and audit requirements.

📌 Track Manager (India)
🏢 HCLTech
📍 India