SCCM - Patching SME

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

As a SCCM - Patching SME at Kyndryl, you'll solve complex problems and identify potential future issues across the spectrum of platforms and services. You'll be at the forefront of new technology and modernization, working with some of our biggest clients - which means some of the biggest in the world.

There's never a typical day as a SCCM - Patching SME at Kyndryl, because no two projects are alike. You'll be managing systems data for clients and providing day-to-day solutions and security compliance. You'll oversee a queue of assignments and work directly with technicians, prioritizing tickets to deliver the best solutions to our clients.

One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here. You'll also get the chance to share your expertise by recommending modernization options, identifying new business opportunities, and cultivating relationships with other teams and stakeholders. Does the work get challenging at times? Yes! But you'll collaborate with a diverse group of talented people and gain invaluable management and organizational skills, which will come in handy as you move forward in your career.

Your future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career, from Junior System Administrator to Architect. We have opportunities for Cloud Hyperscalers that you won't find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.

Who You Are

• 7-10 years of enterprise IT experience with at least 6+ years in SCCM/MECM and Intune administration.

• Strong expertise in:

• SCCM infrastructure (DP, MP, SUP, WSUS integration)

• OSD task sequences (WIM, PXE, Autopilot hybrid deployment)

• Application packaging & deployment

• Patch management & compliance

• Proficiency in PowerShell scripting for endpoint automation.

• Experience with co-management and hybrid SCCM-Intune environments.

• Knowledge of Windows 10/11 lifecycle management, Autopilot, and Azure AD join.

• Familiarity with endpoint security policies (Defender ATP, BitLocker, Firewall via Intune).

• Provide L3 support for SCCM and Intune escalations, resolving client agent failures, deployment errors, and policy conflicts.

• Troubleshoot SCCM client health, software distribution failures, task sequence errors, PXE boot issues, and Intune device enrollment problems.

• Assist end-users with SCCM and Intune functionalities (application installs, updates, compliance issues).

• Design, configure, and maintain SCCM hierarchy (CAS, Primary Sites, DPs, MPs, SUPs).

• Manage SCCM collections, boundaries, discovery methods, and custom client settings.

• Configure Intune compliance policies, configuration profiles, and security baselines.

• Support hybrid co-management scenarios between SCCM and Intune.

• Build and manage application packages (MSI, EXE, AppX) and deployment types in SCCM.

• Configure and deploy Win32 apps, line-of-business apps, and Store apps in Intune.

• Plan and execute monthly patch deployment cycles (Windows Updates, 3rd party apps).

• Monitor compliance and generate patch reports for leadership and audits.

• Handle zero-day patching and emergency deployments with rollback strategies.

• Implement monitoring for SCCM site health, component status, and SQL database performance.

• Configure Intune Device Compliance reports, Endpoint Security dashboards, and Azure Monitor integration.

• Develop and publish custom reports using SCCM SSRS, Power BI, or CMPivot queries.

• Generate compliance and performance reports for patching, deployment success, and device health.

• Ensure endpoint configurations align with CIS benchmarks, ISO/Infosec standards, and client policies.

• Manage BitLocker encryption, Defender AV/ATP policies, and firewall configurations through Intune.

• Apply Conditional Access and device compliance policies for secure access.

• Conduct regular audits of SCCM and Intune configurations.

• Participate in upgrades of SCCM infrastructure, Windows 11 readiness projects, Autopilot implementations, and migration initiatives.

• Automate tasks using PowerShell, Orchestration Groups, or Graph API scripts.

• Contribute to process optimization, self-healing client mechanisms, and policy refinements.

• Stay updated with new SCCM CB releases, Intune features, and MEM roadmap.

• Strong troubleshooting and analytical mindset for resolving complex endpoint issues.

• Excellent communication skills to interact with stakeholders and handle escalations.

• Ability to collaborate with cross-functional teams (security, infra, cloud, network).

• Willingness to work in 24x7 support environment if required.

• Experience with 3rd party patching (e.g., ManageEngine, SCUP).

• Familiarity with Graph API, Microsoft Endpoint Analytics, and Proactive Remediations.

• Certifications:

• Microsoft Certified: Endpoint Administrator Associate

• Microsoft Certified: Modern Desktop Administrator Associate

• ITIL v3/v4 Foundation certification.