EndPoint Infrastructure Patching & Vulnerability Management Administrator

About the role

EY is hiring an EndPoint Infrastructure Patching and Vulnerability Management Administrator for its Digital Workplace Enablement Services (DWES) portfolio, covering the EndPoint Management scope. The role maintains and secures approximately 450 SCCM and AppProxy servers, keeping them patched, hardened and free of known vulnerabilities. It is a war room/on-call position aligned to accelerated patch cycles (Patch Tuesday) and emergency or zero-day events.

Key responsibilities

• Patch and maintain about 450 SCCM/AppProxy servers (non-production first, then production), sequencing Windows and SQL work before SCCM/AppProxy patching and validating restarts within agreed windows.
• Apply Microsoft SCCM/AppProxy hotfixes and SQL Server cumulative updates (CU/GDR) while coordinating around SQL site databases to avoid taking a whole site down.
• Support high-availability failover patching (passive node, switch active/passive, patch former active) to minimise outage windows.
• Remediate vulnerabilities flagged against the server estate (e.g. GVM / Qualys / Tenable findings), triage by CVSS, track each item to closure within SLA and report status and backlog metrics to stakeholders.
• Liaise daily with the SCCM/AppProxy engineering team, SQL/DBA, platform and service management to plan patch windows.
• Raise and manage changes through EY's change management process (RFC / eCAB), including emergency/zero-day changes, and provide War Room coverage during patch surges and zero-day events.
• Produce evidence-based status updates and closure reports for leadership.

Required profile

• Hands-on experience administering and patching SCCM/AppProxy server infrastructure (CAS, Primary Sites, site system roles) in a large enterprise estate.
• Ability to work under pressure in a War Room / on-call model across accelerated and emergency patch cycles.

Required skills

• Strong Windows Server administration (multi-domain Active Directory), including patching, restart sequencing and post-patch validation.
• Working knowledge of SQL Server as an SCCM/AppProxy prerequisite, including CU/GDR updates, site-database criticality and Always On / HA concepts.
• Solid understanding of enterprise change management (RFC / CAB / eCAB) and evidence/audit discipline.