Endpoint devices are currently deployed and managed through the desktop environment team; however, there is a clear gap in dedicated ownership and focus on patch management for server infrastructure. This oversight increases the risk of security vulnerabilities, non-compliance, and poor performance of devices due to pending patches and updates

Responsibilities

Patch Management

• Monitor, test, approve, and deploy OS and third-party application patches across endpoints devices (Windows).
  
• Ensure timely application of security updates and zero-day patches.
  
• Manage patch rollout schedules to minimize business disruption.
  
• Rollback and troubleshoot failed patch deployments as needed.
  

Software Deployment

• Package, test, and deploy enterprise applications using endpoint management tools (e.g., Endpoint Central, SCCM, Intune).
  
• Build and maintain system images for deployment.
  
• Liaise with third-party vendors, such as Dell, to coordinate and initiate zero-touch provisioning.
  
• Ensure smooth and efficient patch management, deployment processes and software licensing compliance.
  

Compliance and Reporting

• Generate and analyse patch compliance reports.
  
• Maintain audit logs for all patch and deployment activities.
  
• Assist in ensuring compliance with relevant security standards (e.g., ISO 27001).
  

Endpoint Management

• Support remote and on-premises devices via endpoint management platforms.
  
• Collaborate with cybersecurity teams to remediate vulnerabilities.
  
• Maintain documentation for patching processes, configurations, and standard operating procedures (SOPs).
  

Testing and Validation

• Conduct pre-deployment testing of patches and applications.
  
• Identity Compatibility issues or conflicts before mass deployment.
  

Requirements

Skills

• Proven experience in patch management and software deployment in mid- to large-scale IT environments.
  
• Hands-on experience with ManageEngine Endpoint Central (Desktop Central), SCCM, Intune, or similar.
  
• Strong knowledge of:
  
• Operating systems (Windows, macOS, Linux)
  
• Third-party applications (browsers, Java, Adobe, etc.)
  
• Patch cycles and security vulnerability management
  
• Experience with remote device management and cloud-based endpoint tools.
  
• Basic scripting (PowerShell, Bash) is a plus.
  
• Strong documentation, communication, and troubleshooting skills.
  

Qualifications:

• Grade 12, Degree in Computer Science/ IT Diploma
  
• NQF Level 6, CompTIA Security+
  
• Windows Server Fundamentals / Modern Desktop Administrator
  
• Microsoft Certified: Endpoint Administrator Associate
  
• ManageEngine Certification (Endpoint Central)
  
• ITIL Foundation