Position Summary

We are seeking a highly skilled Senior Windows Systems & Patch Automation Engineer to manage, secure, and scale enterprise infrastructure. In this role, you will split your expertise between core Windows Systems Administration and advanced vulnerability remediation. You will lead end-to-end patching cycles using Ivanti Security Controls (ISEC), Ivanti EPM, and Qualys VMDR / Qualys VA in Patch Management, utilizing automation scripting and modern ticketing platforms to ensure all changes are tracked, approved, and fully audited.

Key Responsibilities

• Windows Admin: Manage Active Directory, Group Policies (GPOs), DNS, DHCP, and Windows Server health.
  
• Vulnerability Mapping: Correlate Qualys VMDR and Qualys VA scan results with missing updates.
  
• Patch Deployment: Execute scheduled and emergency patch cycles via Ivanti Security Controls (ISEC) and Ivanti EPM.
  
• Automation & APIs: Build PowerShell scripts to automate OS tasks and connect security tools.
  
• Ticketing & ITIL: Own the change management lifecycle within systems like ServiceNow or Jira.
  

Core Duties

• Windows Administration: Maintain, troubleshoot, and optimize Windows Server environments (2016/2019/2022), Active Directory, DNS, DHCP, and GPOs.
  
• Patch Management: Configure and maintain Ivanti Security Controls (ISEC) consoles and agents alongside Ivanti EPM to patch physical, virtual, and cloud-hosted Windows systems.
  
• Ticketing & Change Management: Create, track, and close Change Requests (CRs) using ticketing tools. Ensure strict compliance with enterprise change control workflows.
  
• Scripting & Automation: Develop robust PowerShell scripts to automate daily Windows administration tasks, pre-patch health checks, and post-reboot system validation.
  
• Troubleshooting: Diagnose complex Windows OS errors, update conflicts, registry issues, and failed patch dependencies while logging all resolutions within the incident tracker. Write recovery scripts to automatically fix failed patch installations and repair broken local agent services.
  

Qualifications & Skills

• Experience: 5+ years of Windows Systems Administration experience combined with dedicated vulnerability and patch management.
  
• Ticketing & ITIL: 2+ years working inside enterprise ITSM platforms. Strong familiarity with ITIL frameworks (Incident, Problem, and Change Management) is highly preferred.
  
• Windows Expertise: Deep knowledge of Windows Server architecture, Active Directory infrastructure, and core Windows networking protocols.
  
• Automation Tools: Advanced proficiency with PowerShell for Windows administration, automated task scheduling, and parsing will be an advantage.
  
• Ivanti Expertise: Proficiency in Ivanti Security Controls (ISEC) and Ivanti EPM for enterprise-scale Windows patching.
  
• Qualys Expertise: Strong working knowledge of Qualys Vulnerability Management (Qualys VA) and Detection, and Response (VMDR) workflows.
  
• Soft Skills: Strong problem-solving skills, excellent communication, and a clear understanding of production uptime requirements.