Become a part of our caring community
The Systems Engineer - Patch Management is responsible for the execution, monitoring, troubleshooting, and continuous improvement of enterprise patching and vulnerability remediation activities. This role helps ensure Windows and Linux servers and workstations remain secure, compliant, and current with required operating system and security updates.
The engineer works closely with infrastructure, application, security, vulnerability management, and change management teams to resolve patching issues, remediate vulnerabilities, improve compliance, and increase automation across the patching lifecycle.
Key Responsibilities
Execute scheduled patching for Windows and Linux servers and workstations across development, test, and production environments.
Deploy operating system and security updates using Microsoft Configuration Manager (MECM/SCCM), Ansible, PowerShell, Bash, and related automation tools.
Monitor patch deployments and validate successful installation following scheduled maintenance windows.
Maintain patching groups, deployment schedules, maintenance windows, and device targeting.
Support accelerated patching and remediation of critical and internet-facing vulnerabilities requiring shortened remediation timelines.
Track patch compliance and remediation progress against established SLAs, security requirements, and compliance targets.
Identify and remediate systems that are: Non-compliant
Missing required patches
Offline or unreachable
Experiencing recurring patch failures
Pending required reboots
Outside approved maintenance windows
Troubleshoot patching and deployment failures, including client health, connectivity, disk space, installation, reboot, configuration, and dependency issues.
Perform manual remediation when automated patching is unsuccessful.
Validate system health and patch compliance following remediation activities.
Provide patching status, exception, failure, and remediation reporting.
Identify recurring patch failures, operational gaps, and opportunities for automation.
Develop and support automation using PowerShell, Ansible, Bash, or similar technologies.
Reduce manual patching and remediation activities through standardized and repeatable automation.
Improve patch deployment success rates and reduce recurring failure conditions.
Maintain patching documentation, operational runbooks, troubleshooting procedures, and knowledge articles.
Escalate complex technical issues to senior engineering or platform teams when appropriate.
Required Qualifications
3+ years of experience in systems administration, infrastructure operations, patch management, or a related technical role.
Hands-on experience supporting Windows Server and/or Linux environments.
Experience with enterprise patch management and automation technologies, including: Microsoft MECM/SCCM
Ansible
PowerShell and/or Bash
Experience troubleshooting operating system patching, deployment, and remediation failures.
Understanding of vulnerability management, security remediation, CVEs, and patch compliance concepts.
Working knowledge of Active Directory, DNS, networking, server infrastructure, and virtualization technologies.
Experience working within formal change management and production support processes.
Ability to analyze patch compliance data, identify remediation priorities, and drive issues to resolution.
Ability to work independently on Level 2 incidents and remediation activities while appropriately escalating complex issues.
Preferred Qualifications
Experience with vulnerability management platforms such as Qualys.
Experience with ServiceNow for incidents, changes, requests, and remediation tracking.
Experience developing patching or infrastructure automation.
Experience supporting large-scale enterprise server and workstation environments.
Familiarity with vulnerability remediation SLAs and accelerated patching processes for critical or externally exposed systems.
Use your skills to make an impact
This…