Summary
Overview
Work History
Education
Skills
Websites
Certification
Languages
Projects
Personal Details
Timeline
Generic

Nitin Verma

Pune

Summary

Highly accomplished and results-oriented Lead Endpoint Management Engineer with over 17 years of progressive experience in large-scale IT environments. Expertly navigates Microsoft Endpoint Configuration Manager (SCCM), comprehensive Operating System Deployment (OSD), and both workstation and server patching. Proven track record in achieving patch compliance consistently above 95%, significantly enhancing system security through robust vulnerability management leveraging leading tools like Tenable, Nexpose, and CrowdStrike. A seasoned leader adept at guiding technical teams, fostering proactive client engagement, and committed to maintaining resilient infrastructure under strict SLA adherence.

Overview

18
18
years of professional experience
1
1
Certification

Work History

Lead Endpoint Management Engineer

Mphasis Limited
Pune
02.2019 - Current
  • Strategically led a team of 10 junior Endpoint Management Engineers, providing hands-on technical guidance, performance feedback, and mentorship, resulting in a 20% improvement in team efficiency and skill development.
  • Managed critical client relationships and expectations for key internal and external stakeholders, translating complex security requirements into actionable IT solutions and routinely presenting patch compliance and security posture reports to senior management.
  • Consistently achieved and maintained monthly Service Level Agreement (SLA) compliance of over 95% for patch deployments and vulnerability mediations, ensuring critical security benchmarks were met across the enterprise's 15000+ endpoints.
  • Spearheaded proactive vulnerability management initiatives by actively analyzing scan data from Tenable (Tenable.sc/Nessus) and Rapid Nexpose, prioritizing high-severity vulnerabilities (CVSS 7.0+) for immediate remediation.
  • Leveraged CrowdStrike Falcon (EDR) insights to identify endpoints with active threats or high-risk vulnerabilities, facilitating targeted and expedited patch deployments within 24-48 hours of detection.
  • Designed and executed comprehensive Windows patching deployments for over 15000 workstations and 2000+ servers, consistently achieving 97% patch compliance for critical and security updates with aggressive 20-day deadlines.
  • Developed and implemented automated remediation strategies for non-compliant endpoints (e.g., WUA corruption, client health issues), reducing manual intervention by 30% and significantly improving overall patch success rates.
  • Managed and configured Microsoft Intune for mobile device management (MDM) and application management (MAM) for 1,500+ co-managed devices, enhancing modern endpoint security and deployment capabilities.
  • Streamlined existing SCCM infrastructure management, ensuring high availability and optimal performance of Distribution Points, Management Points, and Software Update Points.
  • Actively troubleshoot complex client-side and server-side issues for SCCM deployments and software updates, performing root cause analysis and implementing solutions that reduced recurring incidents by 25%.

Senior SCCM Engineer

NCS PTE LTD
Singapore
08.2014 - 11.2018
  • Managed the SCCM infrastructure and endpoint management for critical government projects, focusing primarily on server patching and remediation for a fleet of over 2,000 Windows Servers.
  • Designed, optimized, and maintained complex Task Sequences for Operating System Deployment (OSD) of Windows Server and client OS, ensuring standardized and efficient imaging processes across the enterprise.
  • Managed boot images and driver packages within SCCM, ensuring compatibility and seamless deployment across diverse hardware platforms.
  • Configured and maintained PXE Boot environments to facilitate bare-metal deployments and rapid server provisioning for new infrastructure rollouts.
  • Ensured strict adherence to government security and compliance mandates, maintaining 99% patch compliance for highly sensitive production environments with zero unplanned downtime during patching cycles.
  • Executed large-scale patch deployments during scheduled maintenance windows, meticulously coordinating with application owners and stakeholders to minimize service impact.
  • Proactively identified and remediated server vulnerabilities through diligent patching and post-deployment validations, strengthening the overall security posture and reducing audit findings by 15%.
  • Maintained the health and operational stability of a complex SCCM hierarchy (e.g., primary site, secondary sites, DPs), performing regular health checks and troubleshooting to support critical government systems.
  • Contributed to the design and optimization of software update deployment processes, improving patch cycle efficiency by 10% for large-scale server environments.

Application Packaging & Deployment Specialist

Mphasis Limited
Pune
12.2007 - 07.2014
  • Packaged and prepared over 100+ enterprise applications (MSI, EXE, custom installations) for silent and standardized deployment across thousands of endpoints.
  • Utilized industry-standard packaging tools such as AdminStudio and InstallShield to create reliable and conflict-free application packages, adhering to corporate packaging standards.
  • Developed complex custom installation scripts (VBScript, Batch) for intricate applications, managing pre-requisites, registry modifications, and file system changes to ensure seamless deployment.
  • Created hundreds of MST transforms for customizing end-to-end MSI packages to meet specific organizational requirements, license compliance, and security configurations.
  • Conducted rigorous Quality Assurance (QA) testing for packaged applications and SCCM deployments on various Windows operating systems (Windows XP, Windows 7), identifying and documenting critical defects prior to production release.
  • Assisted with software distribution campaigns using SCCM (or SMS 2003/2007 at the time), ensuring timely delivery and performing basic deployment monitoring.
  • Collaborated with development and business teams to understand application requirements and troubleshoot installation issues.

Education

Bachelor of Engineering (BE) - Information Technology

RGPV University
Bhopal, India
06-2006

Skills

  • Endpoint Management Platforms: Microsoft Endpoint Configuration Manager (SCCM/MEMCM Current Branch), Microsoft Intune, Windows Server Update Service (WSUS), Microsoft Deployment Toolkit (MDT), Systems Management Server (SMS 2003/2007)
  • Operating Systems: Windows 11, Windows 10, Windows Server (2016, 2019, 2022), Windows 8, Windows 7, Windows XP
  • OSD & Imaging Task Sequence Design & Management: Boot Image Customization (WinPE), WIM File Management, Driver Management, User State Migration Tool (USMT), Bare Metal Deployments, Refresh/Replace Scenarios, In-Place Upgrades, PXE Boot Configurations
  • Patch Management: Automatic Deployment Rules (ADRs), Software Update Groups (SUGs), Deployment Packages, Third-Party Update (eg, Adobe, Java) Maintenance Windows, Patch Compliance Reporting, Update Rings, Windows as a Service (WaaS)
  • Application Management: Application Model, Packaging (MSI, EXE, Scripting Wrappers), Transforms (MST), Custom Actions, Detection Methods, Supersedence and Dependencies, Virtual Application Packaging (App-V concepts)
  • Modern Management: Microsoft Intune (MDM/MAM), Configuration Profiles, Compliance Policies, Conditional Access, Windows Autopilot, Co-management
  • Vulnerability Management Tools: Tenable (Tenablesc/Nessus), Rapid Nexpose, CrowdStrike Falcon (EDR) for threat insights, Qualys (conceptual understanding)
  • Scripting & Automation: PowerShell (Advanced proficiency), VBScript, Batch Scripting, WMI, JSON
  • Networking & Infrastructure: PXE Boot, DHCP, DNS, IP Helpers, Active Directory, Group Policy Objects (GPO), Firewall Concepts, Network Diagnostic, Distribution Point Management
  • Database: SQL Server (basic querying for reporting and troubleshooting SCCM DB)
  • Troubleshooting & Monitoring: CMTrace, WUAHandlerlog, SMSTSlog, Reboot Coordinatorlog, Windows Updateslog, System/Application Event Logs, Perfmon, Process Monitor, Wireshark (basic)
  • Team & Client Management: Project Coordination, Technical Leadership, Mentoring, Cross-functional Stakeholder Communication, Incident Management, Service Level Agreement (SLA) Management & Reporting
  • Packaging Tools: AdminStudio, InstallShield, Wise Package Studio (historical)
  • Virtualization Tools & Software: VMware, Hyper-V, VirtualBox
  • Endpoint management
  • Vulnerability management
  • Patch deployment
  • Client relationship management
  • SCCM administration
  • Team leadership
  • Automated remediation
  • Security compliance
  • Application packaging
  • Troubleshooting skills
  • Performance monitoring
  • Root cause analysis
  • Process optimization
  • Technical documentation
  • Effective communication
  • Operations management
  • Workforce planning
  • Reliability
  • Teamwork and collaboration
  • Time management
  • Production problem documentation
  • Professionalism
  • Continuous improvement
  • Quality assurance
  • Problem-solving
  • Technical communication
  • Project team collaboration
  • Technical troubleshooting
  • Process improvement

Certification

ITIL Foundation Certification in IT Service Management

Languages

English, Hindi

Projects

Banking Client - Reduced patch compliance gap from 65% to 95% in 4 months using SCCM automation and proper remediation and patching planning., Government of Singapore - Led Windows Server patching for over 2,000 critical systems and supported over 50000+ Workstations., Intune Rollout - Rolled out Microsoft Intune Autopilot for 1500+ users globally., Security Compliance - Worked with security teams to align SCCM/Intune policies with CIS benchmarks.

Personal Details

  • Date of Birth: 2nd January 1983
  • Availability: Immediate or negotiable

Timeline

Lead Endpoint Management Engineer

Mphasis Limited
02.2019 - Current

Senior SCCM Engineer

NCS PTE LTD
08.2014 - 11.2018

Application Packaging & Deployment Specialist

Mphasis Limited
12.2007 - 07.2014

Bachelor of Engineering (BE) - Information Technology

RGPV University
Nitin Verma