Job Description

Endpoint devices are currently deployed and managed through the desktop environment team; however, there is a clear gap in dedicated ownership and focus on patch management for server infrastructure. This oversight increases the risk of security vulnerabilities, non-compliance, and poor performance of devices due to pending patches and updates

Responsibilities

Patch Management

Monitor, test, approve, and deploy OS and third-party application patches across endpoints devices (Windows). Ensure timely application of security updates and zero-day patches. Manage patch rollout schedules to minimize business disruption. Rollback and troubleshoot failed patch deployments as needed.

Software Deployment

Package, test, and deploy enterprise applications using endpoint management tools (e.g., Endpoint Central, SCCM, Intune). Build and maintain system images for deployment. Liaise with third-party vendors, such as Dell, to coordinate and initiate zero-touch provisioning. Ensure smooth and efficient patch management, deployment processes and software licensing compliance.

Compliance and Reporting

Generate and analyse patch compliance reports. Maintain audit logs for all patch and deployment activities. Assist in ensuring compliance with relevant security standards (e.g., ISO 27001).

Endpoint Management

Support remote and on-premises devices via endpoint management platforms. Collaborate with cybersecurity teams to remediate vulnerabilities. Maintain documentation for patching processes, configurations, and standard operating procedures (SOPs).

T

esting and Validation

Conduct pre-deployment testing of patches and applications. Identify compatibility issues or conflicts before mass deployment.

Skills

Proven experience in patch management and software deployment in mid- to large-scale IT environments. Hands-on experience with ManageEngine Endpoint Central (Desktop Central), SCCM, Intune, or similar. Strong knowledge of: Operating systems (Windows, macOS, Linux) Third-party applications (browsers, Java, Adobe, etc.) Patch cycles and security vulnerability management Experience with remote device management and cloud-based endpoint tools. Basic scripting (PowerShell, Bash) is a plus. Strong documentation, communication, and troubleshooting skills.

Qualifications:

Grade 12, Degree in Computer Science/ IT Diploma NQF Level 6, CompTIA Security+ Windows Server Fundamentals / Modern Desktop Administrator Microsoft Certified: Endpoint Administrator Associate ManageEngine Certification (Endpoint Central) * ITIL Foundation