- Identify and validate EOL and outdated software on Windows servers using Qualys or equivalent vulnerability scanning tools

- Uninstall unsupported software and replace it with latest supported versions

- Develop and execute PowerShell scripts for automated remediation and software upgrades

- Perform post-remediation validation to confirm successful upgrades and compliance status

- Maintain detailed logs and documentation for audit and compliance tracking purposes

- Collaborate with application owners and infrastructure teams to schedule changes and minimize service disruptions

Vulnerability Management - Servers & Workstations :

- Manage endpoint security configurations using SCCM (System Center Configuration Manager) and Microsoft Intune

- Create and manage imaging and task sequences in SCCM and Intune environments

- Package and deploy patches on servers and workstations according to monthly security schedules

- Deploy collections in SCCM and push relevant patches to remediate identified vulnerabilities

- Conduct remediation activities using Qualys Patch Management platform

- Write, test, and implement PowerShell scripts to fix vulnerabilities via SCCM or Qualys

- Generate detailed vulnerability reports and provide actionable insights to stakeholders

- Collaborate with cross-functional teams to ensure security best practices are followed organization-wide

Requirements :

- 6- 9 years of relevant IT experience in Windows Infrastructure, Endpoint Management, or Security Operations.

- Strong hands-on experience with PowerShell scripting for automation and vulnerability remediation.

- Solid experience in Windows Server Administration (Windows Server 2012/2016/2019/2022).

- Hands-on expertise with SCCM and Microsoft Intune for patch management, software deployment, and endpoint management.

- Experience using Qualys (or similar vulnerability management/scanning tools).

- Good understanding of CVE remediation, vulnerability management lifecycle, and security compliance requirements.

- Experience with OS imaging, deployment, and task sequencing using SCCM and Intune.

- Ability to identify, troubleshoot, and remediate security vulnerabilities across Windows environments.

- Excellent communication and stakeholder management skills

Notice period to join : 0- 15 days only (No bench resources without a clear LWD).