How your CV stacks up
Upload your CV to see how well it fits this job role
?%
We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products. HCLTech is a globally recognized leader in the Tech and IT industry, but we’ve never forgotten the startup mindset that got us here. We’ve always approached our work with an idea-first attitude because every one of our accomplishments —no matter how big or small —can be traced back to an idea’s single spark.
It’s that spark —that inner drive —that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that’s what drives you to be better, be more and ultimately, be more fulfilled.
Level
L1 – Junior
Location
On-site / Hybrid - London, UK
Experience
2 – 3 years in IT / Patch Management
Education
B.Tech / BCA / B.Sc. (IT or Computer Science) or equivalent
ROLE SUMMARY
The L1 Patch Management Analyst is responsible for the day-to-day execution of patch deployment activities across end-user devices including laptops, desktops, and thin clients. The role focuses on scheduling, deploying, and validating OS and application patches using enterprise patch management tooling, while escalating issues to L2 as required.
KEY RESPONSIBILITIES
- Deploy OS (Windows 10/11) and third-party application patches to end-user devices via SCCM / Microsoft Intune / WSUS as per the approved patch schedule.
- Monitor patch compliance dashboards and generate daily/weekly compliance reports.
- Identify non-compliant devices and initiate remediation actions or escalate to L2.
- Coordinate with end-users and helpdesk to schedule patch windows with minimal disruption.
- Maintain patch deployment records and update ITSM tickets (ServiceNow / Jira) accurately.
- Perform pre-patch and post-patch health checks on targeted endpoints.
- Assist in testing patches in a non-production environment before wide deployment.
- Follow the patch management SOP, CAB process, and change management guidelines.
- Support vulnerability scan tool outputs (Qualys / Tenable) and cross-reference with missing patches.
- Escalate failed deployments, critical patch failures, or zero-day situations to L2 promptly.
TECHNICAL SKILLS & KNOWLEDGE
- Basic knowledge of Windows OS (Windows 10/11) patch lifecycle and update mechanisms.
- Familiarity with SCCM/MECM, Microsoft Intune, or WSUS for endpoint patch deployment.
- Exposure to ITSM platforms – ServiceNow, Remedy, or equivalent.
- Understanding of Active Directory and Group Policy basics.
- Basic scripting exposure (PowerShell or Batch) for patch status queries.
- Awareness of vulnerability scanning tools (Qualys, Nessus, Tenable).
- Ability to read compliance and deployment reports from patch management dashboards.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
SOFT SKILLS & COMPETENCIES
- Good verbal and written communication skills for coordinating with end-users.
- Ability to follow documented SOPs and checklists accurately.
- Time management – capable of handling multiple patch deployment tasks concurrently.
- Basic analytical skills to identify and report patch deployment anomalies.
- Team player with a willingness to work in shifts / on-call rotations.
PREFERRED CERTIFICATIONS
- Microsoft 365 Certified: Modern Desktop Administrator Associate (MD-100/MD-101)
- CompTIA A+ or CompTIA IT Fundamentals (ITF+)
- ITIL 4 Foundation
Level
L2 – Mid-Level
Location
On-site / Hybrid - London, UK
Experience
3 – 6 years in EUC / Patch management EUC Management
Education
B.Tech / BCA / B.Sc. (IT or Computer Science) or equivalent
ROLE SUMMARY
The L2 Senior Patch Management Engineer owns the end-to-end patch lifecycle for the end-user computing environment. Responsibilities include designing and maintaining patching baselines, automating patch workflows, resolving complex deployment failures, and acting as an escalation point for L1 analysts. The role also involves continuous improvement of patch tooling and processes.
KEY RESPONSIBILITIES
- Own the patch management lifecycle: assessment, testing, approval, deployment, validation, and reporting for all EUC endpoints.
- Design and maintain software update groups, collections, and deployment rules in SCCM/MECM and Microsoft Intune.
- Develop and maintain PowerShell / WMI scripts to automate patch compliance checks, remediation, and reporting.
- Act as L2 escalation for patch deployment failures, application compatibility issues, and non-compliant device investigations.
- Conduct patch testing in pilot/UAT rings before production rollout; document test results and obtain change approval.
- Integrate Qualys / Tenable vulnerability scan data to drive patch prioritisation based on CVSS scores.
- Define and enforce patching SLAs for Critical, High, Medium, and Low severity patches per security policy.
- Maintain and improve the patch management runbook, SOPs, and exception handling process.
- Collaborate with security operations (SOC) to address zero-day threats and emergency patch deployments.
- Produce monthly patch compliance reports and trend analysis for management review.
- Mentor and guide L1 analysts; review their tickets and provide technical feedback.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
TECHNICAL SKILLS & KNOWLEDGE
- Deep expertise in SCCM/MECM – software update point, ADRs, deployment rings, client health.
- Hands-on experience with Microsoft Intune / Autopilot / Windows Update for Business.
- Advanced PowerShell scripting for automation (compliance remediation, report extraction, deployment triggers).
- Experience with vulnerability management tools: Qualys, Tenable Nessus, or Rapid7 InsightVM.
- Knowledge of Windows OS lifecycle, patch Tuesday cycle, CBS, WUA, and WinSxS.
- Familiarity with macOS patch management (Jamf Pro / Munki) is an advantage.
- Understanding of BitLocker, Windows Defender, and endpoint security baselines (CIS / STIG).
- Experience integrating patch workflows with ServiceNow ITSM and CMDB.
- Working knowledge of Azure AD, Entra ID, and Conditional Access policies.
SOFT SKILLS & COMPETENCIES
- Strong analytical and troubleshooting skills for complex patch failures.
- Excellent documentation skills – able to produce clear SOPs, RCAs, and change records.
- Effective communicator across technical and non-technical stakeholders.
- Proactive mindset – identifies process gaps and proposes improvements.
- Ability to manage concurrent workstreams under deadline pressure.
PREFERRED CERTIFICATIONS
- Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)
- Microsoft Certified: Azure Administrator Associate (AZ-104)
- CompTIA Security+ or CySA+
- ITIL 4 Managing Professional (or Foundation)
- Qualys Certified Specialist – Vulnerability Management
Benefits
- A supportive, diverse, and global team with a brilliant culture.
- Competitive compensation and benefits that includes up to 20 days’ vacation per year, various insurances like Term life and Business Travel insurance. These are apart from the statutory benefits applicable in the country. Employee benefits are regulated by an internal policy that contains full details regarding the entitlement and conditions for the benefits as per the law of the land.
- Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks – Engagement Champion to name a few.
To know more about us visit – www.hcltech.com
For more information on how we process your personal data, please refer to HCLTech’s Candidate Data Privacy Notice.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location