EndPoint Management Server Administrator

About the role

Join the Digital Workplace Enablement Services team as an Endpoint Infrastructure Patching & Vulnerability Management Administrator. Based in Kochi, India or Manila, Philippines, you will maintain and secure approximately 450 on-premises SCCM and AppProxy infrastructure servers, including Central Administration Sites, Primary Sites, SQL site databases and supporting server roles. You will own the end-to-end patching and vulnerability remediation lifecycle in an accelerated War Room and on-call environment covering Patch Tuesday, emergency and zero-day events.

Key responsibilities

• Execute monthly, accelerated and emergency patching across approximately 450 SCCM and AppProxy servers, progressing through non-production and production environments in the confirmed sequence.

• Sequence Windows Server, SQL Server, SCCM and AppProxy patching correctly, and perform and validate server restarts within agreed maintenance windows.

• Apply Microsoft SCCM and AppProxy hotfixes and SQL Server cumulative updates, coordinating carefully around critical SQL site databases.

• Support high-availability failover patching by patching passive nodes or SQL replicas, switching active and passive roles, and patching the former active nodes to minimise outage windows.

• Own remediation of vulnerabilities identified across the SCCM, AppProxy and SQL server estate, tracking findings to closure within service-level agreements.

• Triage and prioritise findings by criticality, distinguish in-scope items from those owned by other teams, and ensure accurate CMDB ownership.

• Validate deployed fixes, remove flagged or unnecessary software, and capture evidence for audit and remediation closure.

• Maintain remediation status, backlog reduction and platform health metrics for the SCCM and AppProxy lead and stakeholders.

• Coordinate daily with SCCM and AppProxy engineering, SQL and database administration, platform and service management teams to plan and execute patch windows.

• Raise and manage RFC, CAB and eCAB changes, including emergency and zero-day changes, while respecting change freezes and approval requirements.

• Provide War Room coverage during patch surges and zero-day events, including readiness checks, live execution, validation, rollback and stakeholder communication.

• Produce concise, evidence-based status updates and closure reports for leadership.

What we're looking for

• Hands-on experience administering and patching SCCM and AppProxy server infrastructure, including Central Administration Sites, Primary Sites and site system roles, in a large enterprise environment.

• Strong Windows Server administration skills across multi-domain Active Directory environments, including patching, restart sequencing and post-patch validation.

• Working knowledge of SQL Server as an SCCM and AppProxy prerequisite, including cumulative and general distribution updates, site-database criticality and Always On or high-availability concepts.

• Solid understanding of enterprise change management, including RFC, CAB and eCAB processes, with strong evidence and audit discipline.

• Ability to work effectively under pressure in a War Room and on-call model across accelerated, emergency and zero-day patch cycles.

• Strong coordination, prioritisation, troubleshooting, documentation and stakeholder communication skills.