Lead Infrastructure Engineer - BigFix / Server Patching Engineer

svb; Bengaluru; On-site; INR 2,600,000 - 4,200,000; Full time

Job summary

FC Global Services India LLP (First Citizens India) in Bengaluru seeks a Lead Infrastructure Engineer - Patch Management to drive enterprise patching, remediation, and compliance. You will lead automation using BigFix, Qualys, and PowerShell to secure banking systems and mentor L2 teams.

You will partner with security, infrastructure, and developers to design scalable patching processes, build dashboards, and ensure audit readiness.

Qualifications

• 8+ years of patch management, vulnerability remediation, and compliance experience in server OS environments (Windows, RHEL).
• Strong automation scripting and tooling experience (BigFix, Qualys, PowerShell).
• Ability to mentor L2 teams and drive engineering improvements.

Responsibilities

• Lead enterprise patch management and vulnerability remediation initiatives.
• Automate patching processes and build dashboards for compliance reporting using BigFix Insights for Vulnerability Remediation (IVR).
• Mentor L2 engineers and collaborate with security, infrastructure, and development teams.
• Design and optimize patch testing, rollout, and remediation workflows to minimize outages.

Skills

BigFix

Qualys

PowerShell scripting

Automation

Tools

BigFix

Qualys

PowerShell

Job description

FC Global Services India LLP (First Citizens India), a part of First Citizens BancShares, Inc., a top 20 U.S. financial institution, is a global capability center (GCC) based in Bengaluru. Our India-based teams benefit from the company’s over 125-year legacy of strength and stability. First Citizens India is responsible for delivering value and managing risks for our lines of business. We are particularly proud of our strong, relationship-driven culture and our long-term approach, which are deeply ingrained in our talented workforce. This is evident across all key areas of our operations, including Technology, Enterprise Operations, Finance, Cybersecurity, Risk Management, and Credit Administration. We are seeking talented individuals to join us in our mission of providing solutions fit for our clients' greatest ambitions.

Job Description:

Value Proposition

As a Patch Engineer, this role is integral to leading enterprise-wide patch management, vulnerability remediation, and compliance initiatives. The position leverages advanced expertise in BigFix, automation, PowerShell scripting and vulnerability scanning tools like Qualys to secure enterprise systems. The engineer will play a technical role along with mentoring L2 teams for technical issues and help automate patching processes for improved efficiency and robust compliance.

Job Details

Position Title: Lead Infrastructure Engineer - Patch Management

Career Level: P3

Job Category: Manager

Role Type: Hybrid

Job Location: Bangalore

About the Team:

First Citizens Bank is one of the top financial services providers, recognized and awarded for our customer satisfaction, sustainable profitability, and overall stability and security. Our associates make First Citizens Bank a great place for our clients to do business. Those who grow, achieve and succeed with First Citizens Bank are those who share our core values of integrity, service excellence and stability. Our Patch Management team requires a highly experienced Principal Engineer responsible for driving engineering, automation and support for security and application patching in the Infrastructure Operations area. Leads the patching / vulnerability remediation of infrastructure and applications that are hosted in datacenter and are critical for banking operations, tracks issues during patching and automate remediation of vulnerabilities and reporting.

Impact:

This Principal Engineer position is essential for enforcing security standards, ensuring compliance, and protecting the organization from threats. The role is pivotal in setting up automation and best practices in patching, participating in vulnerability remediation, and providing direction and mentorship to junior associates

Key Deliverables:

• Troubleshoot health of BigFix client, recommendations of relay placement, Peer Nest etc.
• Patch and upgrade BigFix clients and server environment with latest updates.
• Provide mentoring and support to other engineers for best practice of advanced scripting, use of APIs, automation, and database services.
• Work with architects, integration engineers, and developers to design/integrate solutions. Improving data quality, security, and compliance.
• Build dashboards to enable reporting of patch and vulnerability compliance using BigFix Insights for Vulnerability Remediation (IVR)
• Identify and manage solution dependencies with other systems and elements of the enterprise IT infrastructure.
• Assess software patches and create recommended patch list with logical explanation in terms of compliance.
• Develop and optimize pre- and post- patching processes to ensure proper implementation without any outages.
• Score each patch based on risks & opportunity to prioritize. Identify which patches are more valuable to the organization than others.
• Act as an escalation point for patch execution / L2 team mentoring them and resolving complex scenarios and technical issues.
• Ensures overall service levels for infrastructure uptimes through patch management standards, firmware upgrades and vendor based advisory.
• Develops automation scripts and programs to streamline manual patch operations and improve mean time to deliver and first-time right metrics.
• Lead rapid assessments and accelerated rollouts in response to critical and zero-day threats.
• Oversee pre-deployment patch testing in pilot environments to ensure compatibility and prevent disruptions to business operations.
• Establish security governance, maintain audit readiness, and provide executive-level dashboards regarding patch compliance and risk reduction.
• Partner closely with cyber security operations, vulnerability management, and infrastructure teams to map threat intelligence to asset criticality.

Skills and Qualification (Functional and Technical Skills)

Must have

8+ years of deep exposure in various Server OS platforms (Windows, RHEL) patch management, vulnerability remediation, and achieve compliance using various tools (BigFix, Qualys, PowerShell scriptin