Contribute to EY's mission of building a better working world by ensuring the security and integrity of our Endpoint Management infrastructure. This role focuses on maintaining approximately 450 SCCM and AppProxy servers, ensuring they are consistently patched, hardened, and free from vulnerabilities. You will be instrumental in managing the entire server patching and remediation lifecycle, from initial monitoring and validation through to deployment coordination and the closure of identified vulnerabilities.

This hands-on position requires a proactive approach to managing server health across production and non-production environments. You will operate within a dynamic environment that includes critical components like Central Administration Sites (CAS), Primary Sites, and their associated SQL site databases. The role demands meticulous execution, often under accelerated timelines or emergency change protocols, always adhering to EY's robust change management processes.

Oversee the comprehensive server patching process for around 450 SCCM/AppProxy servers, prioritizing non-production environments before proceeding to production. This includes executing monthly, accelerated, and emergency patching cycles according to established sequences.

Ensure the seamless application of Microsoft SCCM/AppProxy hotfixes and SQL Server cumulative updates, coordinating closely with the SQL site databases to prevent any site-wide disruptions. Support High-Availability failover patching to minimize downtime windows.

Take ownership of remediating vulnerabilities identified within the SCCM/APPPROXY server estate, using tools like Qualys or Tenable. Track each remediation item to successful closure within defined Service Level Agreements (SLAs).

Triage and prioritize vulnerability findings based on criticality (CVSS), accurately distinguishing between items within the scope of SCCM/APPPROXY/SQL and those managed by other teams. Re-assign out-of-scope items with correct CMDB ownership.

Validate the effectiveness of deployed fixes in mitigating reported vulnerabilities. Remove flagged or unnecessary software and meticulously capture evidence for audit trails and closure.

Maintain and report on the status of remediation efforts, backlog reduction, and overall platform health metrics to stakeholders and the SCCM/APPPROXY lead.

Collaborate daily with the SCCM/APPPROXY engineering team, SQL/DBA specialists, platform teams, and service management to meticulously plan and execute patch windows.

Manage and execute changes through EY's robust change management system (RFC / eCAB), including urgent/zero-day changes, while strictly adhering to change freezes and approval requirements.

Provide critical support in War Room operations during intensive patching periods and zero-day events, covering readiness checks, live execution, validation, potential rollback procedures, and clear communication to all stakeholders.

Produce clear, concise, and evidence-based status updates and comprehensive closure reports for leadership.

Demonstrate hands-on experience in administering and patching SCCM/AppProxy server infrastructure, including CAS, Primary Sites, and site system roles within a large-scale enterprise environment.

Possess strong Windows Server administration skills, encompassing multi-domain Active Directory, with a proven track record in patching, restart sequencing, and post-patch validation.

Exhibit working knowledge of SQL Server as a critical prerequisite for SCCM/AppProxy, including the application of Cumulative Updates (CU)/General Distribution Releases (GDR) and a solid understanding of site-database criticality and Always On Availability Group concepts.

Show a solid grasp of enterprise change management processes (RFC / CAB / eCAB) and a disciplined approach to evidence and audit requirements.

Demonstrate the ability to perform effectively under pressure within a War Room or on-call capacity, managing accelerated and emergency patch cycles.