Full Time

MECM/SCCM Consultant

XChange Software Inc
Contract
Mid-Senior level
Staffing and Recruiting
San Francisco Bay Area
???* / year

Job Description

Role: Enterprise Patch Management & Vulnerability Remediation Consultant

Required: Prior State Government Client Experience

Remote - (PST Hours)

12+ Month Contract

Phone then video interview


Primary Focus

Accelerate OS and application patching, reduce remediation backlogs, automate patch management workflows, and improve SLA compliance across enterprise environments.

Core Technical Skills

Windows Patching Expertise

  • Strong experience with MECM/SCCM, including ADRs, Software Update Groups (SUGs), deployment rings, pilot groups, and server patch orchestration.
  • Hands-on experience with Microsoft Intune and Windows Update for Business (WUfB), including update rings, compliance policies, device readiness, and reporting.
  • Expertise in Winget scripting and automation for application lifecycle management.

Server & Hybrid Environment Patching

  • Experience patching Windows Servers in on-premises VMware and AWS EC2 environments.
  • Hands-on experience with AWS Systems Manager (SSM) Patch Manager, AWS Inspector, and AWS Security Hub integrations.
  • Experience with Linux patching using YUM and APT package managers.

Database & Middleware Patch Management

  • Experience applying SQL Server Cumulative Updates (CUs) and Service Packs, including dependency analysis and validation.
  • Knowledge of .NET Framework and .NET Runtime patching, servicing, and vulnerability remediation.

Security Tools & Integration

  • Experience with Tenable.io and Tenable.SC, including vulnerability analysis, prioritization, and asset correlation.
  • Familiarity with CrowdStrike findings and remediation workflows.
  • Strong experience with Microsoft Active Directory, including on-premises AD and Azure AD/Entra ID, Group Policies (GPOs), Organizational Units (OUs), and security group management.
  • Experience integrating APIs with Tenable, Microsoft Defender, CrowdStrike, Jamf, and ServiceNow.
  • Ability to develop automated dashboards, reporting solutions, and remediation tracking mechanisms.

Automation & Scripting

  • Expert-level PowerShell scripting for SCCM, Intune, Microsoft Graph API, and Azure AD automation.
  • Strong Python scripting skills for data processing, orchestration, API integrations, and cloud automation.
  • Experience with GitHub Actions and GitHub Copilot for workflow automation.
  • Experience designing CI/CD pipelines for patch testing, code quality validation, and version control.

Automation Experience Required For

  • Patch readiness assessment and validation
  • Deployment sequencing
  • Rollback planning and execution
  • Exception management
  • Inventory reconciliation and compliance reporting

Vulnerability Management & Technical Analysis

  • Strong experience analyzing vulnerabilities, assessing risk, and recommending appropriate compensating controls.
  • Ability to prioritize remediation efforts based on security impact, exploitability, and business risk.
  • Experience driving enterprise vulnerability remediation programs and improving compliance metrics.


☕ It is the weekend. Most US employers post jobs on weekdays, so expect fewer new ones until Monday morning.

View Similar Jobs

Matches Jobs

Similar jobs which you may be interested in. Typically using your existing skillset.