Apply on Employer Site

Peraton · 2 weeks ago

Patching/SCCM Administrator

Oak Ridge, TN

Full-time

Onsite

Mid, Senior Level

$80K/yr - $128K/yr

5+ years exp

Peraton is a next-generation national security company that drives missions of consequence. The Patching / SCCM Administrator will provide Tier III IT operations support focusing on endpoint management, patching, and compliance, ensuring timely updates and secure baselines.

Information TechnologyRobotics

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Plan, schedule, and deploy Windows OS and application patches across servers and endpoints in accordance with OIM policy

Validate patch compliance against secure configuration baselines and DOE directives

Perform pre- and post-patch testing, documenting results and mitigating issues

Maintain patch deployment records, including maintenance logs, validation history, and compliance reports

Collaborate with cybersecurity teams to remediate vulnerabilities identified through patching gaps

Administer and maintain Microsoft Endpoint Configuration Manager (SCCM), including collections, deployments, task sequences, and reporting

Support Microsoft Intune for mobile device and modern endpoint management

Develop and maintain automation scripts (PowerShell, Azure CLI) to streamline patching and endpoint management tasks

Manage software distribution, OS imaging, and application packaging for enterprise endpoints

Monitor SCCM infrastructure health, including site servers, distribution points, and SQL databases

Continuously monitor patch compliance, endpoint health, and SCCM infrastructure performance

Generate and deliver compliance reports to leadership and stakeholders

Track and report on capacity utilization, resource consumption, and licensing compliance

Detect and resolve patching failures, bottlenecks, and outages in line with SLAs

Maintain and update the Configuration Management Database (CMDB) with patching and endpoint configuration items

Submit all patching changes via the OIM-approved change management system in accordance with the Change Control Review (CCR) process

Evaluate proposed changes for technical and cybersecurity risk, ensuring compliance with secure baselines

Maintain documentation of patching SOPs, SCCM configurations, and endpoint policies, reviewed quarterly or after major changes

Qualification

SCCM administrationWindows OS patchingPowerShell scriptingMicrosoft IntuneCompliance frameworksHybrid endpoint managementEndpoint security certificationsTroubleshooting skillsDocumentation skillsCommunication skills

Required

5 years with BS/BA; 3 years with MS/MA; 0 years with PhD

Demonstrated technical proficiency equivalent to industry-recognized certifications, such as: Microsoft Certified: Endpoint Administrator Associate, Microsoft Certified: Windows Server Hybrid Administrator Associate, CompTIA Security+ or Network+, Vendor-specific certifications in endpoint security or patch management platforms

Proficiency in PowerShell scripting, SCCM administration, and automation tools

Strong knowledge of Windows OS patching, SCCM infrastructure, Intune, and compliance frameworks

Ability to support Windows, macOS, and Linux endpoints as required

Must be a US Citizen able to obtain an agency clearance