[Remote] MECM/SCCM Consultant

Note: The job is a remote job and is open to candidates in USA. XChange Software Inc. is seeking an Enterprise Patch Management & Vulnerability Remediation Consultant to accelerate operating system and application patching, reduce remediation backlogs, and automate patch management workflows. The role focuses on improving SLA compliance across enterprise environments.

Responsibilities

• Accelerate OS and application patching, reduce remediation backlogs, automate patch management workflows, and improve SLA compliance across enterprise environments
• Patch readiness assessment and validation
• Deployment sequencing
• Rollback planning and execution
• Exception management
• Inventory reconciliation and compliance reporting

Skills

• Prior State Government Client Experience
• Strong experience with MECM/SCCM , including ADRs, Software Update Groups (SUGs), deployment rings, pilot groups, and server patch orchestration
• Hands-on experience with Microsoft Intune and Windows Update for Business (WUfB) , including update rings, compliance policies, device readiness, and reporting
• Expertise in Winget scripting and automation for application lifecycle management
• Experience patching Windows Servers in on-premises VMware and AWS EC2 environments
• Hands-on experience with AWS Systems Manager (SSM) Patch Manager , AWS Inspector, and AWS Security Hub integrations
• Experience with Linux patching using YUM and APT package managers
• Experience applying SQL Server Cumulative Updates (CUs) and Service Packs, including dependency analysis and validation
• Knowledge of .NET Framework and .NET Runtime patching, servicing, and vulnerability remediation
• Experience with Tenable.io and Tenable.SC , including vulnerability analysis, prioritization, and asset correlation
• Familiarity with CrowdStrike findings and remediation workflows
• Strong experience with Microsoft Active Directory , including on-premises AD and Azure AD/Entra ID, Group Policies (GPOs), Organizational Units (OUs), and security group management
• Experience integrating APIs with Tenable, Microsoft Defender, CrowdStrike, Jamf, and ServiceNow
• Ability to develop automated dashboards, reporting solutions, and remediation tracking mechanisms
• Expert-level PowerShell scripting for SCCM, Intune, Microsoft Graph API, and Azure AD automation
• Strong Python scripting skills for data processing, orchestration, API integrations, and cloud automation
• Experience with GitHub Actions and GitHub Copilot for workflow automation
• Experience designing CI/CD pipelines for patch testing, code quality validation, and version control
• Patch readiness assessment and validation
• Deployment sequencing
• Rollback planning and execution
• Exception management
• Inventory reconciliation and compliance reporting
• Strong experience analyzing vulnerabilities, assessing risk, and recommending appropriate compensating controls
• Ability to prioritize remediation efforts based on security impact, exploitability, and business risk
• Experience driving enterprise vulnerability remediation programs and improving compliance metrics

Benefits

• Remote (PST Hours)

Company Overview