Note: The job is a remote job and is open to candidates in USA. XChange Software Inc. is seeking an Enterprise Patch Management & Vulnerability Remediation Consultant to accelerate operating system and application patching, reduce remediation backlogs, and automate patch management workflows. The role focuses on improving SLA compliance across enterprise environments.
Responsibilities
- Accelerate OS and application patching, reduce remediation backlogs, automate patch management workflows, and improve SLA compliance across enterprise environments
- Patch readiness assessment and validation
- Deployment sequencing
- Rollback planning and execution
- Exception management
- Inventory reconciliation and compliance reporting
Skills
- Prior State Government Client Experience
- Strong experience with MECM/SCCM , including ADRs, Software Update Groups (SUGs), deployment rings, pilot groups, and server patch orchestration
- Hands-on experience with Microsoft Intune and Windows Update for Business (WUfB) , including update rings, compliance policies, device readiness, and reporting
- Expertise in Winget scripting and automation for application lifecycle management
- Experience patching Windows Servers in on-premises VMware and AWS EC2 environments
- Hands-on experience with AWS Systems Manager (SSM) Patch Manager , AWS Inspector, and AWS Security Hub integrations
- Experience with Linux patching using YUM and APT package managers
- Experience applying SQL Server Cumulative Updates (CUs) and Service Packs, including dependency analysis and validation
- Knowledge of .NET Framework and .NET Runtime patching, servicing, and vulnerability remediation
- Experience with Tenable.io and Tenable.SC , including vulnerability analysis, prioritization, and asset correlation
- Familiarity with CrowdStrike findings and remediation workflows
- Strong experience with Microsoft Active Directory , including on-premises AD and Azure AD/Entra ID, Group Policies (GPOs), Organizational Units (OUs), and security group management
- Experience integrating APIs with Tenable, Microsoft Defender, CrowdStrike, Jamf, and ServiceNow
- Ability to develop automated dashboards, reporting solutions, and remediation tracking mechanisms
- Expert-level PowerShell scripting for SCCM, Intune, Microsoft Graph API, and Azure AD automation
- Strong Python scripting skills for data processing, orchestration, API integrations, and cloud automation
- Experience with GitHub Actions and GitHub Copilot for workflow automation
- Experience designing CI/CD pipelines for patch testing, code quality validation, and version control
- Patch readiness assessment and validation
- Deployment sequencing
- Rollback planning and execution
- Exception management
- Inventory reconciliation and compliance reporting
- Strong experience analyzing vulnerabilities, assessing risk, and recommending appropriate compensating controls
- Ability to prioritize remediation efforts based on security impact, exploitability, and business risk
- Experience driving enterprise vulnerability remediation programs and improving compliance metrics
Benefits
- Remote (PST Hours)
Company Overview