[Remote] Enterprise Patch Management Engineer
Note: The job is a remote job and is open to candidates in USA. Staffworxs is a digital and data analytics company that helps global brands drive transformation through technology expertise. The company is seeking a senior Enterprise Patch Management Engineer to assess enterprise patching and vulnerability management processes, design a risk-based future-state framework, identify automation opportunities, and develop an actionable implementation roadmap. The role also facilitates cross-functional workshops, aligns technical stakeholders, and produces detailed process, technical, and governance documentation.
Responsibilities
- Assess and document the current-state patching process for each major system and technology group, including ownership, tooling, dependencies, approvals, testing, deployment, rollback, exception handling, reporting, and governance
- Evaluate patching practices across networking, operating systems, databases and middleware, virtualization and VDI, CI/CD and container platforms, storage, secrets/PKI/HSM platforms, and application security scanning
- Identify gaps, bottlenecks, manual activities, technical dependencies, control requirements, and operational constraints that limit patch frequency or increase deployment risk
- Analyze how vulnerabilities are identified, prioritized, remediated, validated, tracked, and reported across the enterprise
- Develop a criticality and risk-scoring approach for technology groups, systems, or vulnerability classes and translate the model into target patch cadences and measurable SLAs
- Design a future-state enterprise patching framework that supports higher-frequency patching while protecting application availability, resiliency, security, and business operations
- Identify opportunities to automate patch assessment, testing, orchestration, deployment, validation, rollback, evidence collection, and compliance reporting
- Recommend improvements to patch tooling, CI/CD integration, infrastructure automation, vulnerability scanning, change processes, maintenance windows, and operational runbooks
- Define a pragmatic implementation roadmap, including priorities, sequencing, dependencies, quick wins, longer-term capabilities, and measurable success criteria
- Facilitate workshops and working sessions with infrastructure, platform, security, application, operations, and other technical teams to validate findings and drive alignment
- Present findings, design recommendations, risks, trade-offs, and implementation options to technical leads and stakeholders and build consensus around the future-state approach
- Produce clear, reusable documentation including current-state assessments, process flows, future-state designs, patch standards, SLA frameworks, operating procedures, runbooks, and implementation recommendations
Skills
- 5+ years of experience in infrastructure engineering, platform engineering, systems engineering, DevOps/SRE, security engineering, or a related enterprise technology discipline
- Demonstrated exposure to enterprise patch management and/or vulnerability management in complex, production environments
- Hands-on technical experience in at least two of the technology domains listed below
- Experience assessing current-state technical processes and converting findings into a clear, actionable future-state plan
- Experience developing or operating SLA-, severity-, criticality-, or risk-based patching/remediation frameworks
- Strong understanding of patch lifecycle activities, including discovery, prioritization, dependency analysis, testing, change control, deployment, validation, rollback, exception management, and reporting
- Ability to identify automation opportunities and design repeatable approaches that reduce manual effort and support increased patch frequency
- Strong analytical and problem-solving skills, with the ability to balance cybersecurity risk, operational risk, application resiliency, and business requirements
- Experience facilitating cross-functional technical workshops and driving agreement among teams with different platforms, priorities, and operating models
- Strong written and verbal communication skills, including the ability to communicate technical findings and recommendations clearly to engineering and technology leadership
- Excellent documentation skills, including process documentation, technical designs, standards, procedures, and runbooks
- Experience designing enterprise patching or vulnerability-remediation transformation programs spanning multiple infrastructure and platform teams
- Knowledge of vulnerability severity and prioritization concepts such as CVSS, exploitability, asset criticality, business impact, exposure, compensating controls, and remediation SLAs
- Experience with infrastructure-as-code, configuration management, scripting, or orchestration used to automate patching and platform maintenance
- Familiarity with DevSecOps practices and integrating vulnerability remediation into CI/CD pipelines and platform engineering workflows
- Experience in highly regulated, high-availability, or mission-critical environments where patching must be balanced against stringent resiliency and change-management requirements
- Understanding of governance, audit evidence, patch exceptions, risk acceptance, compliance reporting, and metrics/KPIs for patch and vulnerability management
- Experience developing executive or technical-lead presentations that summarize current-state findings, target-state architecture/processes, and transformation roadmaps
Benefits
- Remote work arrangement
- 12-month contract
Company Overview
Company H1B Sponsorship