Snr Security Patching Deployment Engineer

McGregor Boyall; Greater London; Hybrid; GBP 106,000 - 125,000; Full time

Job summary

McGregor Boyall is seeking a Security Patch Deployment Engineer in London for a 6-month contract. You will deploy Windows security patches via Ivanti Security Controls across workstations and servers, coordinating with the offshore patch management consultant and service owners.

You will automate patch scheduling, deployment, rollback, and reporting to reduce manual work, while maintaining an accurate patch calendar and ensuring governance.

Qualifications

• Experience deploying patches with Ivanti Security Controls and Windows patching in enterprise environments.
• Knowledge of Windows patch management tooling and processes.

Responsibilities

• Execute approved Windows security patch deployments across workstations and servers using Ivanti Security Controls.
• Configure agent policies, patch groups, and reboot behavior within approved standards.
• Monitor deployments to completion and troubleshoot failures including rollbacks.
• Maintain patch calendar and coordinate with offshore patch management consultant and service owners.
• Prepare implementation, validation, rollback and communication steps for each production change.
• Identify and implement automation opportunities across patch scheduling and reporting to reduce manual effort.

Skills

Ivanti Security Controls

Windows Server administration

Windows Client administration

PowerShell

Task Scheduler

Certificates

Patch troubleshooting

Phase deployment

Active Directory

Group Policy

DNS

TCP/IP

SMB

WinRM

Remote administration

Least-privilege access

ServiceNow change

Tools

Ivanti Security Controls

Job description

Security Patching Deployment Engineer is required for this financial in London. To provide secure and reliable deployment of Microsoft Windows security patches across this financial org. workstations and servers using Ivanti Security Controls.

Technical skills / experience required:

• Ivanti Security Controls
• Windows Server and Windows Client administration (incl. Windows Update components, services, event logs, registry, file systems, PowerShell, Task Scheduler, certificates and software installation technologies.
• Patch troubleshooting exp.
• Experience of phased deployment, pilot or canary groups, maintenance windows, reboot orchestrations, service validation, rollback planning…
• Working knowledge of Active Directory, Group Policy, DNS, TCP/IP, SMB, WinRM, remote administration and least-privilege operational access.
• ServiceNow change
• Strong PowerShell capability

London, Victoria - 6 months Contract

£575 - 675 per day

Hybrid working x3 days a week in office, x2 remote.

The role executes approved patching schedules, coordinates delivery with the offshore patch management consultant and technical service owners, troubleshoots failed deployments, validates completion evidence and escalates material exceptions.

The role is also responsible for identifying and implementing automation opportunities across patch scheduling, deployment, exception management and reporting to reduce manual effort, improve control effectiveness and support the transition towards a scalable future-state operating model.

Some responsibilities include:

• Execute approved Windows security patch deployments across workstations and servers through Ivanti Security Controls, including scheduled, phased, manual and out-of-band releases.
• Configure and machine groups, agent policies, patch groups, scan templates. Deployment templates, distribution settings and reboot behavior within approved standards.
• Monitor deployments to completion, diagnose failed scans, downloads, installations, agent communications and reboots, and complete controlled re-deployment or rollback actions.
• Maintain an accurate patch calendar and deployment scope with offshore patch management consultant, Platform Operations, Helpdesk, application owners and service owners.
• Prepare implementation, validation, rollback and communication steps for each production change and retain evidence.
• Automate and process improvements - Identify, design and implement automation opportunities across patch scheduling, deployment, exception management and reporting to reduce manual effort and improve operational efficiency.
• Reduce dependency on spreadsheet-based tracking, email driven coordination and manual reconciliation through sustainable automation solutions.
• Develop and maintain automated workflows for patch deployment preparation.