Senior Systems Engineer

Become a part of our caring community

The Senior Systems Engineer, Patch Management is responsible for the strategy, administration, automation, and continuous improvement of enterprise patch and vulnerability management processes across Windows, Linux, virtual, cloud, and end-user computing platforms. This role ensures systems remain secure, compliant, and operationally stable while partnering with infrastructure, security, application, and business teams to reduce risk and maintain service reliability.

The ideal candidate combines strong technical expertise with operational leadership, driving patch compliance, vulnerability remediation, automation, reporting, and process improvements across a large-scale enterprise environment. Key Responsibilities
Patch Management & Vulnerability Remediation

- Lead enterprise patch management operations across Windows Server, Linux, virtual infrastructure, cloud platforms, and endpoint devices.

- Develop and maintain patch deployment strategies, schedules, maintenance windows, and compliance standards.

- Coordinate remediation efforts for critical, high, and medium vulnerabilities identified through vulnerability management platforms.

- Manage exception and risk acceptance processes in partnership with Information Security and application owners.

Platform Administration

- Administer enterprise patching technologies including Microsoft Configuration Manager (SCCM/MECM), Intune, Red Hat Satellite, Ansible.

- Support operating system lifecycle management, including upgrades, patching, and end-of-support remediation activities.

- Ensure successful deployment and validation of security updates across production and non-production environments.

Automation & Process Improvement

- Design and implement automation solutions to improve patching efficiency, reporting, and compliance tracking.

- Continuously improve deployment processes, monitoring capabilities, and operational standards.

- Identify opportunities to reduce manual effort and increase deployment reliability.

Compliance & Reporting

- Maintain patch compliance metrics and service-level objectives.

- Create executive and operational reporting for vulnerability remediation, compliance status, aging vulnerabilities, and risk exposure.

- Ensure adherence to regulatory, security, and organizational compliance requirements.

Cross-Functional Collaboration

- Partner with Infrastructure, Security, Cloud, Application Support, and Engineering teams to coordinate patching activities.

- Provide technical leadership during major vulnerability response events and emergency patching situations.

- Participate in change management reviews, maintenance planning, and production readiness assessments.

- Mentor junior engineers and contribute to technical skill development within the team.

Use your skills to make an impact

Required Qualifications

- 5+ years of experience in enterprise patch management, systems engineering, infrastructure operations, or vulnerability remediation.

- Strong experience with Windows Server and Linux administration in large-scale enterprise environments.

- Hands-on experience with enterprise patching tools such as MECM/SCCM, Intune, Red Hat Satellite, Ansible, or equivalent platforms.

- Experience managing vulnerability remediation activities using tools such as Qualys, Rapid7, or similar vulnerability management solutions.

- Experience with scripting and automation using PowerShell, Python, Ansible, or similar technologies.

Preferred Qualifications

- Experience leading enterprise patch compliance or vulnerability management programs.

- Experience supporting cloud platforms such as Azure, AWS, or Google Cloud.

- Knowledge of security frameworks and standards including NIST, CIS Benchmarks, and vulnerability management best practices.

- Experience creating executive dashboards, compliance reporting, and operational metrics.

- Relevant certifications such as Security+, CISSP, RHCSA/RHCE, Az