Walk-in || Windows Patching Engineer

Role & responsibilities

1. Patch Management

• Plan and schedule Windows patch deployments.
• Review and evaluate Microsoft monthly updates (Patch Tuesday releases).
• Apply security, critical, cumulative, and feature updates.
• Ensure servers and workstations remain compliant with patching policies.

2. WSUS/SALT STACK Administration

• Manage Windows Server Update Services (WSUS).
• Monitor patch synchronization and update catalogs.

3. Patch Testing and Validation

• Test patches in development or staging environments.
• Assess potential business impacts before production deployment.
• Validate application and server functionality after patch installation.
• Coordinate testing activities with application owners.

4. Server maintenance

• Patch Windows Servers (2012, 2016, 2019, 2022, etc.).
• Patch Windows desktops.
• Schedule maintenance windows and perform reboots as required.
• Maintain high system availability during patch activities.

5. Security and Compliance

• Ensure compliance with organizational security standards.
• Address vulnerabilities identified through security scans.
• Work with cybersecurity teams to remediate critical CVEs.

6. Monitoring and Reporting

• Monitor patch deployment success and failure rates.
• Generate compliance and patch status reports.
• Track systems with missing or failed updates.

7. Troubleshooting

• Investigate failed patch installations.
• Resolve WSUS, SCCM, Windows Update, and agent-related issues.
• Analyze Windows update logs and deployment errors.
• Roll back updates if they cause system instability.

8. Vulnerability Remediation

• Review vulnerability scan results from tools such as:

• Microsoft Defender Vulnerability Management

• Tenable Nessus

• Qualys

• Rapid7

• Prioritize remediation based on severity and risk.

• Validate vulnerability closure after patch deployment.

9 . Change and Incident Management

• Create and implement Change Requests (CRs).
• Follow ITIL change management processes.
• Participate in CAB (Change Advisory Board) meetings.
• Support incident and problem management activities related to patching.

Additional Responsibilities

• Coordinate patching activities across multiple environments.
• Maintain patching documentation and standard operating procedures.
• Support cloud environments (Azure Virtual Machines, Azure Update Manager).
• Ensure backup and recovery readiness before major patch deployments.
• Collaborate with infrastructure, application, and security teams.

Common Tools Used

• Microsoft WSUS
• SALT Stack
• Altiris
• Azure Update Manager
• ServiceNow
• Active Directory

Preferred candidate profile