System Administrator - Patching / SCCM
System Admin – Patching / SSCM Can be staffed in Oak Ridge, TN; Lemont, IL; or Germantown, MD U.S Citizenship Required The Patching / SCCM Administrator will provide Tier III IT operations support across the Office of Information Management (OIM) and SC mission systems, with a focus on endpoint management, patching, and compliance. This role is responsible for operating and maintaining Microsoft Endpoint Configuration Manager (SCCM), Intune, and related patching infrastructure, ensuring timely updates, secure baselines, and compliance with DOE directives. The ideal candidate will have strong expertise in Windows desktop/server patching, automation, and reporting, while supporting hybrid environments and evolving enterprise service delivery models. Plan, schedule, and deploy Windows OS and application patches across servers and endpoints in accordance with OIM policy. Validate patch compliance against secure configuration baselines and DOE directives. Perform pre- and post-patch testing, documenting results and mitigating issues. Maintain patch deployment records, including maintenance logs, validation history, and compliance reports. Collaborate with cybersecurity teams to remediate vulnerabilities identified through patching gaps. Administer and maintain Microsoft Endpoint Configuration Manager (SCCM), including collections, deployments, task sequences, and reporting. Support Microsoft Intune for mobile device and modern endpoint management. Develop and maintain automation scripts (PowerShell, Azure CLI) to streamline patching and endpoint management tasks. Manage software distribution, OS imaging, and application packaging for enterprise endpoints. Monitor SCCM infrastructure health, including site servers, distribution points, and SQL databases. Continuously monitor patch compliance, endpoint health, and SCCM infrastructure performance. Generate and deliver compliance reports to leadership and stakeholders. Track and report on capacity utilization, resource consumption, and licensing compliance. Detect and resolve patching failures, bottlenecks, and outages in line with SLAs. Maintain and update the Configuration Management Database (CMDB) with patching and endpoint configuration items. Submit all patching changes via the OIM-approved change management system in accordance with the Change Control Review (CCR) process. Evaluate proposed changes for technical and cybersecurity risk, ensuring compliance with secure baselines. Maintain documentation of patching SOPs, SCCM configurations, and endpoint policies, reviewed quarterly or after major changes. Minimum Qualifications · Bachelor’s Degree in Information Technology, Computer Science or a related field or equivalent relevant experience; Master’s Degree preferred. · U.S Citizenship · Demonstrated technical proficiency equivalent to industry-recognized certifications, such as: o Microsoft Certified: Endpoint Administrator Associate o Microsoft Certified: Windows Server Hybrid Administrator Associate o CompTIA Security or Network · Vendor-specific certifications in endpoint security or patch management platforms · Proficiency in PowerShell scripting, SCCM administration, and automation tools. · 7-10 years of experience in information technology, systems administration or other IT related field. Other Job Specific Skills Strong knowledge of Windows OS patching, SCCM infrastructure, Intune, and compliance frameworks. Ability to support Windows, macOS, and Linux endpoints as required. Experience with hybrid endpoint management (SCCM Intune). Familiarity with vulnerability management tools (e.g., Tenable, Qualys) and integration with patching workflows. Strong troubleshooting skills for patch deployment failures, SCCM infrastructure issues, and endpoint compliance gaps. Excellent documentation and communication skills for compliance reporting and operational transparency. cjpost
