VP, Senior Patching & Automation Engineer, Technology Group

GIC Private Limited; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Job summary

GIC Private Limited is seeking a VP-level Senior Patching & Automation Engineer in Singapore. The role leads end-to-end patch management for Windows and Linux servers, building automated workflows with Tanium and Ansible. You will craft pre/post-checks, coordinate maintenance with owners, and work with Security on remediation.

Strong scripting in Bash/PowerShell and systems admin expertise are essential. Ideal candidates bring 8+ years in systems engineering, 4+ years in enterprise patch

Qualifications

• Experience leading end-to-end patch management across Windows and Linux server estates.
• Strong automation skills with Tanium, Ansible, Bash and PowerShell.
• Hands-on scripting and workflow design for automated patching at scale.
• coordination with application owners and security teams on remediation and SLAs.

Responsibilities

• Own end-to-end patch management for Windows and Linux servers.
• Engineer and optimize Tanium and Ansible for automated patching.
• Build automated patch workflows with pre- and post-checks, health validation and rollback.
• Coordinate patch cycles with application owners and perform emergency patching.
• Partner with Security on vulnerability remediation and reporting.
• Extend patch coverage to hosting stack components where applicable.
• Improve processes and tooling to reduce manual effort and patch lead times.
• Typically 8+ years in systems engineering with 4+ years in enterprise patch management.
• Hands-on Tanium experience and strong Bash/PowerShell skills.
• Solid Windows Server and RHEL administration knowledge.
• Understand CVSS and vulnerability management concepts.

Skills

Patching & automation

Scripting (Bash, PowerShell)

Ansible Automation

Tanium patching

Change management

Stakeholder coordination

Windows Server administration

Red Hat Enterprise Linux admin

Tools

Tanium

Ansible

Bash

PowerShell

Python

VMware vSphere/ESXi

Red Hat Satellite

Job description

VP, Senior Patching & Automation Engineer, Technology Group

Location: Singapore, SG

Job Function: Technology Group

Job Type: Permanent

GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

Technology Group
We experiment, design, and lead a 24x7 global business where we support core capabilities in asset management, trading, investment operations, and risk management. We deliver secure, reliable, and integrated solutions, and provide insights on new, and emerging technologies.

Infrastructure & Cybersecurity Resilience (ICR)

We design, build, and secure the technology foundations that power GIC’s global investment operations. We aim to deliver resilient, scalable, and secure infrastructure that empowers our people and businesses to perform securely, efficiently, and effectively.

What will you do in this role?

The Private Cloud team engineers and runs GIC's on-premises hosting platforms: the servers, operating systems and virtualisation layers that host our core applications. We aim to keep this estate secure, up to date and as automated as possible.

• Own end-to-end patch management for GIC's Windows and Linux server estate, from planning and testing to deployment and compliance reporting.
• Engineer and optimise Tanium (e.g., Patch, Deploy, Comply) and Ansible for automated, repeatable patching at scale.
• Build automated patch workflows with pre- and post-checks, health validation and rollback, using Bash, PowerShell and Python.
• Coordinate patch cycles and maintenance windows with application owners, and run emergency patching for critical and zero-day vulnerabilities.
• Partner with the Security team on vulnerability remediation, tracking patch compliance against agreed SLAs and reporting to stakeholders.
• Extend patching coverage to the wider hosting stack (e.g., hypervisors, firmware and middleware) where appropriate.
• Continuously improve processes, documentation and tooling to cut manual effort and patch lead times.
• Typically 8+ years in systems engineering, including at least 4 years running enterprise patch management.
• Hands-on experience with Tanium for patching and endpoint management.
• Strong Ansible automation skills and proficiency in Bash and PowerShell scripting.
• Solid administration knowledge of Windows Server and Red Hat Enterprise Linux (or similar distributions).
• Understanding of vulnerability management concepts (CVSS, scanner findings from tools such as Qualys or Tenable) and change management practice.
• Strong organisational and stakeholder skills for coordinating changes across many application teams.

Preferred Requirements

• Experience with Microsoft MECM / SCCM, WSUS or Red Hat Satellite.
• Experience with Ansible Automation Platform / AWX and CI/CD tooling.
• VMware vSphere / ESXi lifecycle management experience.
• Relevant certifications such as RHCE or Tanium certifications.

What Success looks like in your first 12 months

• Patch compliance for critical and high vulnerabilities consistently meets agreed SLAs.
• Most routine patching runs through automated, self-validating workflows with minimal manual effort.
• Application owners have a predictable, well-communicated patching calendar and trust the process.

Work at the Point of Impact
We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.

GIC is a Great Place to Work

At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.

GIC is an equal opportunity employer
As an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.