Windows compliance

Wipro; Navi Mumbai; On-site; INR 600,000 - 1,200,000; Full time

Job summary

Wipro in Navi Mumbai is seeking an experienced Windows Server patching administrator to manage end-to-end patching across environments. You will plan, deploy, and validate monthly security updates, analyze VAPT findings, and remediate vulnerabilities within SLAs.

Strong skills in PowerShell, AD, and patch management tools are required. Beneficial are Azure IaaS exposure, ITIL/ServiceNow familiarity, and CIS Benchmarking knowledge.

Qualifications

• Experience in Windows patch management across multiple environments.
• Hands-on remediation of vulnerabilities from VAPT findings.
• Knowledge of CIS Benchmarks and Windows hardening.
• Familiarity with patch management tools and scripting for automation.

Responsibilities

• Manage end-to-end Windows Server patching activities across development, test, and production environments.
• Plan, schedule, deploy, and validate monthly Microsoft security updates and out-of-band patches.
• Analyze VAPT reports from security scanners (Qualys, Tenable, Rapid7, Defender).
• Remediate OS vulnerabilities within defined SLAs and coordinate with teams.
• Maintain patch compliance dashboards and produce periodic reports.

Skills

Windows Server

Patching management

Vulnerability remediation

PowerShell scripting

Active Directory

VMware/Hyper-V

Azure IaaS

ITIL/ServiceNow

Automation (Ansible)

CIS Benchmarks

Tools

WSUS

SCCM/MECM

Azure Update Manager

Qualys/Tenable/InsightVM

Defender Vulnerability Management

Job description

Job Summary

Key Responsibilities

• Manage end-to-end Windows Server patching activities across development, test, and production environments.
• Plan, schedule, deploy, and validate monthly Microsoft security updates and out-of-band patches.
• Analyze VAPT reports generated from security scanning tools such as Qualys, Tenable, Rapid7, or Microsoft Defender Vulnerability Management.
• Remediate operating system vulnerabilities within defined SLAs.
• Coordinate with application owners and infrastructure teams to resolve security findings without impacting business services.
• Perform Windows Server hardening in accordance with organizational security standards and CIS Benchmarks.
• Validate successful vulnerability remediation through rescans and compliance reporting.
• Investigate failed patches and implement appropriate remediation measures.
• Monitor server health after patch deployment and resolve any issues arising from patch installation.
• Maintain patch compliance dashboards and provide periodic reports to management.
• Support security audits and compliance requirements by providing evidence of patching and vulnerability remediation.
• Create and maintain standard operating procedures (SOPs), runbooks, and technical documentation.
• Participate in maintenance windows and planned weekend activities as required.
• Collaborate with cybersecurity, infrastructure, and application teams to improve overall security posture.

Required Technical Skills

• Strong administration experience with Windows Server 2012, 2016, 2019, and 2022.
• Hands-on experience in Windows patch management.
• Experience with vulnerability remediation based on VAPT findings.
• Good understanding of Microsoft security updates and Windows security architecture.
• Knowledge of CIS Benchmarks and Windows hardening practices.
• Experience with patch management tools such as WSUS, MECM/SCCM, Azure Update Manager, or equivalent enterprise solutions.
• Familiarity with vulnerability management tools such as Qualys, Tenable Nessus, Rapid7 InsightVM, or Microsoft Defender Vulnerability Management.
• Experience with Active Directory, Group Policy, DNS, DHCP, and IIS administration.
• Ability to troubleshoot patch installation failures and Windows operating system issues.
• Good understanding of PowerShell scripting for automation and reporting.
• Working knowledge of VMware and Hyper-V environments is desirable.

Preferred Skills

• Experience in Azure IaaS or hybrid cloud environments.
• Knowledge of ITIL processes and ServiceNow.
• Experience with automation tools such as PowerShell or Ansible.
• Exposure to endpoint security and antivirus solutions.
• Basic knowledge of Linux server administration is an added advantage.