WSUS Engineer

Location: Remote
 

Role Overview

We are looking for a WSUS Engineer to manage and maintain Windows Server Update Services (WSUS), ensuring that Windows servers and endpoints receive required security patches and software updates in a controlled and reliable manner.

Key Responsibilities

• Install, configure, and administer WSUS environments.
• Manage Windows updates, patches, approvals, and deployment schedules.
• Monitor WSUS servers and troubleshoot synchronization and update issues.
• Create and manage computer groups for phased patch deployments.
• Test and approve patches before production deployment.
• Monitor patch compliance and generate update/compliance reports.
• Troubleshoot failed updates and client-to-WSUS communication issues.
• Manage WSUS database, cleanup, maintenance, and disk space.
• Work with Active Directory and Group Policy (GPO) to configure Windows Update settings.
• Support monthly Patch Tuesday activities and emergency security patching.
• Maintain documentation for patching procedures, configurations, and operational processes.
• Coordinate with security and infrastructure teams to address vulnerabilities and patching requirements.

Required Skills

• Hands-on experience with Windows Server 2016/2019/2022.
• Good knowledge of WSUS, Windows Update, Active Directory, and Group Policy.
• Understanding of Windows patch management and security updates.
• Basic knowledge of PowerShell scripting for administration and automation.
• Experience troubleshooting Windows update and WSUS-related issues.
• Good knowledge of TCP/IP, DNS, and general Windows networking.
• Strong troubleshooting and problem-solving skills.

Preferred Skills

• Experience with Microsoft Configuration Manager (SCCM/MECM).
• Knowledge of Microsoft Defender and Windows security updates.
• Experience with PowerShell-based automation.
• Familiarity with vulnerability and patch management tools.
• Microsoft certifications such as MD-100/MD-102, AZ-800/AZ-801, or related certifications.