We're looking for an experienced Senior Microsoft Endpoint & Patch Management Engineer to support a large-scale modernization of enterprise patch management infrastructure.

This individual will play a key role in transforming how Windows servers, desktops, laptops, and mobile devices are managed, updated, and secured. The focus will be on migrating legacy patch management processes to modern Microsoft cloud-based solutions, improving automation, strengthening security compliance, and reducing patch deployment timelines.

Key Responsibilities

- Lead the migration from Windows Server Update Services (WSUS) to Azure Update Manager.
- Assess, design, and implement automated patch management solutions using Microsoft Intune and Windows Autopatch.
- Modernize patching processes across Windows servers, desktops, laptops, and iOS devices.
- Develop strategies to reduce patch deployment windows and improve vulnerability remediation timelines.
- Evaluate and implement device compliance policies and Microsoft Entra ID Conditional Access controls.
- Design and document technical solutions, including architecture, implementation plans, and operational procedures.
- Present proposed infrastructure changes to the Change Advisory Board (CAB) and execute approved solutions.
- Establish automated patch compliance monitoring, reporting, and remediation processes.
- Expand patch management capabilities to include application patching and updates.
- Collaborate with infrastructure, application, and security teams to minimize operational disruptions and ensure service availability following patch deployments.





Required Qualifications

- Strong hands-on experience with Microsoft Intune, Windows Autopatch, and enterprise patch management .
- Experience with Azure Update Manager and WSUS , ideally including modernization or migration projects.
- Robust knowledge of Windows Server, Windows 11, and Microsoft cloud infrastructure.
- Experience designing and implementing automated patch deployment strategies.
- Understanding of vulnerability management, endpoint security, and patch compliance requirements.
- Experience developing technical documentation, implementation plans, and change management proposals.
- Ability to independently assess an environment, recommend improvements, and execute technical solutions.
- Strong troubleshooting, communication, and cross-functional collaboration skills.

Nice to Have

- Experience with Microsoft Entra ID Conditional Access and device compliance policies.
- iOS device management through Microsoft Intune.
- PowerShell scripting and infrastructure automation.
- Application patch management and third-party software updates.
- Familiarity with monitoring and incident management tools such as Datadog, PagerDuty, or Halo ITSM.

Why This Opportunity? This is an opportunity to take ownership of a meaningful infrastructure modernization initiative with a strong emphasis on security, automation, and operational efficiency .

You'll work closely with infrastructure and security leadership to help design and implement a more resilient, automated patch management environment across approximately 560 servers and end-user devices.

📌 Senior Microsoft Endpoint & Patch Management Engineer (Vancouver)
🏢 Robert Half
📍 Vancouver