Senior Patch Management Engineer

We are seeking a seasoned Senior Patch Management Engineer to oversee enterprise-wide patching, vulnerability remediation, and security compliance. This role involves managing patches across servers, endpoints, virtualization platforms, applications, and security infrastructure to ensure a secure and compliant IT environment.

Key Responsibilities

- Manage the entire patch lifecycle, including assessment, planning, deployment, validation, and reporting.
- Perform patch discovery and assessment, maintain infrastructure inventory, identify OS/application/firmware versions, analyze missing patches, and track end-of-life systems.
- Develop and maintain patch baselines, schedules, maintenance windows, and deployment plans.
- Plan and execute patching activities across Windows, Linux/Unix, VMware, databases, middleware, and enterprise applications.
- Conduct pre- and post-patching activities such as health checks, backup verification, dependency validation, pilot testing, service validation, and reboot management.
- Troubleshoot patch failures, deployment issues, and rollback procedures, coordinating with vendors or OEMs as necessary.
- Drive vulnerability-based patching by prioritizing CVEs, mapping vulnerabilities to patches, and ensuring remediation within SLA timelines.
- Manage change requests, obtain CAB approvals, and adhere to ITIL-based patching processes.
- Prepare patch compliance dashboards, management reports, risk and exception reports, and maintain audit-ready documentation.
- Collaborate closely with infrastructure, security, application, and business teams to ensure successful patch deployment and compliance.

Required Qualifications

- Minimum of 6 years’ experience in Patch Management, Systems Administration, Infrastructure, or Vulnerability Management.
- Strong hands-on experience with Windows Server and Linux/Unix patching.
- Experience working with VMware and other virtualization platforms.
- Understanding of patching processes for applications, databases, middleware, network devices, and security appliances.
- Proficiency with one or more patch management tools such as SCCM/MECM, WSUS, Tanium, BigFix, Ivanti, or ManageEngine Endpoint Central.
- Solid knowledge of Vulnerability Management, CVEs, Change Management, CAB procedures, rollback processes, and ITIL frameworks.
- Excellent troubleshooting, documentation, reporting, and stakeholder management skills.

Preferred Qualifications and Certifications

Certifications in ITIL, Microsoft, VMware, Linux, or Cybersecurity/Vulnerability Management are highly desirable and will be considered an advantage.

This position offers the opportunity to work in a dynamic environment where patch management and security compliance are critical to organizational success. The ideal candidate will bring technical expertise combined with strong process discipline and communication skills to ensure the integrity and security of enterprise systems.