Senior Network Patch Engineer - Automation & CVE-Driven Upgrades

HCLTech; Slough; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Vacation benefit

Insurance coverage

Global team

Job summary

HCLTech in London, United Kingdom, seeks a Senior Patch Management Engineer to own the firmware and software lifecycle across a multi-vendor network estate. You will drive risk assessment, automated patching workflows, and CVE-based prioritisation while coordinating with cross-functional teams.

The role requires 3–6 years in network engineering, hybrid work at client site, and strong scripting and automation capabilities.

Qualifications

• Expert-level CLI skills across Cisco IOS, IOS-XE, NX-OS, JunOS, Aruba AOS, PAN-OS.
• Deep understanding of networking protocols (OSPF, BGP, EIGRP, MPLS, VRF).
• Experience with automated patching toolchains (Ansible, Netmiko, NAPALM, Python).
• Familiarity with vendor firmware lifecycles and patch management processes.
• Experience with Cisco NSO or DNA Centre is desirable.

Responsibilities

• Own firmware/software lifecycle for routers, switches, firewalls, load balancers, and wireless controllers in multi-vendor environments.
• Assess advisories and map CVEs, prioritise by impact and CVSS score.
• Develop patch runbooks with pre-checks, upgrade procedures, rollback steps, and post-validation checks.
• Automate patch workflows using Ansible, Netmiko, NAPALM, or vendor APIs.
• Lead maintenance window planning, CAB submissions, and rollback tests.

Skills

Cisco IOS

IOS-XE

NX-OS

JunOS

Aruba AOS

Palo Alto PAN-OS

Ansible

Netmiko

NAPALM

Python

Tools

Cisco NSO

DNA Centre

SolarWinds NPM

NetBrain

Infoblox

Job description

HCLTech in London, United Kingdom, seeks a Senior Patch Management Engineer to own the firmware and software lifecycle across a multi-vendor network estate. You will drive risk assessment, automated patching workflows, and CVE-based prioritisation while coordinating with cross-functional teams.

The role requires 3–6 years in network engineering, hybrid work at client site, and strong scripting and automation capabilities.