Own the Windows patch lifecycle design: SCCM, WSUS, Intune (where applicable). Maintain SCCM software-update groups, ADRs, distribution-point hygiene. Drive automation patterns for non-managed Windows instances currently in application CI/CD pipelines. Coordinate with the Active Directory, identity and endpoint teams. Drive the Windows-side Phase 2 automation roadmap. Mentor Windows patching engineers.
