Snr Security Patching Deployment Engineer

McGregor Boyall; City Of London; Hybrid; GBP 106,000 - 125,000; Part time

Benefits offered by this job

Hybrid working

Job summary

McGregor Boyall is seeking a Security Patching Deployment Engineer in London to secure and deploy Windows patches across workstations and servers using Ivanti Security Controls.

You will coordinate phased deployments, automate tasks with PowerShell and maintain patch calendars, ensuring evidence of completion and rollback readiness while collaborating with offshore and in-house teams. This is a 6-month contract with hybrid in-office/remote arrangement.

Qualifications

• Experience deploying Windows security patches in enterprise environments.
• Knowledge of Windows Server and Windows Client patching components and services.
• Ability to troubleshoot patch deployment issues and coordinate changes.

Responsibilities

• Execute Windows security patch deployments across workstations and servers using Ivanti Security Controls.
• Configure agent policies, patch groups, and deployment templates within approved standards.
• Monitor deployments, diagnose failures, and perform controlled re-deployments or rollbacks.
• Maintain patch calendars and coordinate with offshore patch management and service owners.
• Identify automation opportunities to reduce manual effort and improve reporting.

Skills

Patch deployment

Active Directory

PowerShell scripting

Troubleshooting

Change management

Tools

Ivanti Security Controls

PowerShell

ServiceNow

Active Directory

Group Policy

DNS

TCP/IP

WinRM

Job description

Security Patching Deployment Engineer is required for this financial in London. To provide secure and reliable deployment of Microsoft Windows security patches across this financial org. workstations and servers using Ivanti Security Controls.

Technical skills / experience required:

• Ivanti Security Controls
• Windows Server and Windows Client administration (incl. Windows Update components, services, event logs, registry, file systems, PowerShell, Task Scheduler, certificates and software installation technologies.
• Patch troubleshooting exp.
• Experience of phased deployment, pilot or canary groups, maintenance windows, reboot orchestrations, service validation, rollback planning
• Working knowledge of Active Directory, Group Policy, DNS, TCP/IP, SMB, WinRM, remote administration and least-privilege operational access.
• ServiceNow change
• Strong PowerShell capability

London, Victoria - 6 months Contract

£575 - 675 per day

Hybrid working x3 days a week in office, x2 remote.

The role executes approved patching schedules, coordinates delivery with the offshore patch management consultant and technical service owners, troubleshoots failed deployments, validates completion evidence and escalates material exceptions.

The role is also responsible for identifying and implementing automation opportunities across patch scheduling, deployment, exception management and reporting to reduce manual effort, improve control effectiveness and support the transition towards a scalable future-state operating model.

Some responsibilities include:

• Execute approved Windows security patch deployments across workstations and servers through Ivanti Security Controls, including scheduled, phased, manual and out-of-band releases.
• Configure and machine groups, agent policies, patch groups, scan templates. Deployment templates, distribution settings and reboot behavior within approved standards.
• Monitor deployments to completion, diagnose failed scans, downloads, installations, agent communications and reboots, and complete controlled re-deployment or rollback actions.
• Maintain an accurate patch calendar and deployment scope with offshore patch management consultant, Platform Operations, Helpdesk, application owners and service owners.
• Prepare implementation, validation, rollback and communication steps for each production change and retain evidence.
• Automate and process improvements - Identify, design and implement automation opportunities across patch scheduling, deployment, exception management and reporting to reduce manual effort and improve operational efficiency.
• Reduce dependency on spreadsheet-based tracking, email driven coordination and manual reconciliation through sustainable automation solutions.
• Develop and maintain automated workflows for patch deployment preparation.