EndPoint Management Server Administrator
Description
Salary: ₱80,000 – ₱120,000 per month
About the role
Join the Digital Workplace Enablement Services team as an Endpoint Infrastructure Patching & Vulnerability Management Administrator. Based in Kochi, India or Manila, Philippines, you will maintain and secure approximately 450 on-premises SCCM and AppProxy infrastructure servers, including Central Administration Sites, Primary Sites, SQL site databases and supporting server roles. You will own the end-to-end patching and vulnerability remediation lifecycle in an accelerated War Room and on-call environment covering Patch Tuesday, emergency and zero-day events.
Key responsibilities
Execute monthly, accelerated and emergency patching across approximately 450 SCCM and AppProxy servers, progressing through non-production and production environments in the confirmed sequence.
Sequence Windows Server, SQL Server, SCCM and AppProxy patching correctly, and perform and validate server restarts within agreed maintenance windows.
Apply Microsoft SCCM and AppProxy hotfixes and SQL Server cumulative updates, coordinating carefully around critical SQL site databases.
Support high-availability failover patching by patching passive nodes or SQL replicas, switching active and passive roles, and patching the former active nodes to minimise outage windows.
Own remediation of vulnerabilities identified across the SCCM, AppProxy and SQL server estate, tracking findings to closure within service-level agreements.
Triage and prioritise findings by criticality, distinguish in-scope items from those owned by other teams, and ensure accurate CMDB ownership.
Validate deployed fixes, remove flagged or unnecessary software, and capture evidence for audit and remediation closure.
Maintain remediation status, backlog reduction and platform health metrics for the SCCM and AppProxy lead and stakeholders.
Coordinate daily with SCCM and AppProxy engineering, SQL and database administration, platform and service management teams to plan and execute patch windows.
Raise and manage RFC, CAB and eCAB changes, including emergency and zero-day changes, while respecting change freezes and approval requirements.
Provide War Room coverage during patch surges and zero-day events, including readiness checks, live execution, validation, rollback and stakeholder communication.
Produce concise, evidence-based status updates and closure reports for leadership.
What we're looking for
Hands-on experience administering and patching SCCM and AppProxy server infrastructure, including Central Administration Sites, Primary Sites and site system roles, in a large enterprise environment.
Strong Windows Server administration skills across multi-domain Active Directory environments, including patching, restart sequencing and post-patch validation.
Working knowledge of SQL Server as an SCCM and AppProxy prerequisite, including cumulative and general distribution updates, site-database criticality and Always On or high-availability concepts.
Solid understanding of enterprise change management, including RFC, CAB and eCAB processes, with strong evidence and audit discipline.
Ability to work effectively under pressure in a War Room and on-call model across accelerated, emergency and zero-day patch cycles.
Strong coordination, prioritisation, troubleshooting, documentation and stakeholder communication skills.