Windows System Engineer - SCCM/WSUS (Tanium knowledge or exposure is must)

Title: SCCM/WSUS – Windows System Engineer

Location: Princeton, NJ (Onsite)

Mandatory: Tanium knowledge or exposure is must

Role Summary

Windows Platform Engineer responsible for supporting Windows patching, SCCM/WSUS engineering, vulnerability remediation, patch automation, and enterprise endpoint/server management.

Key Responsibilities

• Administer and support Windows Server patching and vulnerability remediation.
• Manage and troubleshoot WSUS configuration, synchronization, approvals, patch deployment, and related platform issues.
• Support SCCM/MECM patching and software deployment activities across Windows environments.
• Create, test, deploy, and troubleshoot patch/software deployment packages.
• Support automated patch scheduling and maintenance-window orchestration.
• Analyze patch failures and perform remediation for non-compliant or failed Windows servers/endpoints.
• Develop or enhance PowerShell-based automation for patching and operational activities.
• Support vulnerability remediation packages and recurring remediation activities.
• Maintain patch compliance, deployment status, operational dashboards, and remediation reporting.
• Coordinate with infrastructure, security, application, and change-management teams for patch deployments.
• Develop technical documentation, operating procedures, and troubleshooting runbooks.

Required Skills

• Strong hands-on Windows Server administration experience.
• Strong expertise in SCCM/MECM and WSUS administration.
• Experience with Windows patching, software deployment, and vulnerability remediation.
• Strong knowledge of patch deployment lifecycle, maintenance windows, troubleshooting, and compliance validation.
• Experience with PowerShell scripting/automation.
• Good understanding of Windows services, Active Directory, Group Policy, networking, and endpoint/server troubleshooting.
• Experience working in large enterprise Windows environments.

Preferred: Working knowledge of ServiceNow, Splunk, Jenkins, Harness, Tanium, asset-tagging automation, operational dashboards, and automated remediation workflows.