Patch Management & Application Deployment Engineer

Synechron; San Francisco (CA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

Global organization with opportunities

Training & development

Flexible workplace arrangements

Job summary

Synechron is seeking a Patch Management & Application Deployment Engineer to join our infrastructure team in a hands-on role spanning Windows and Linux servers, endpoints, VMs, and cloud-hosted systems. You will manage enterprise patching, packaging, deployment automation, and vulnerability remediation within regulated environments.

The role demands strong SCCM/MECM and Intune experience, plus scripting in PowerShell and Bash.

Qualifications

• Bachelor’s degree in computer science, information systems, cybersecurity, engineering, or equivalent professional experience.
• Strong Windows and Linux administration skills with scripting and troubleshooting.
• Advanced experience with SCCM/MECM and Intune; familiarity with Patch Manager Plus, Rapid7, Autopilot, imaging, and task sequences is highly desirable.
• Strong PowerShell skills and automation of systems-management workflows; Bash, Python, Microsoft Graph, or Ansible is a plus.
• Practical knowledge of software packaging formats (MSI, MSIX, Win32, executable, script-based installers).
• Understanding of virtualization, cloud infrastructure, clustered systems, enterprise identity, endpoint agents, firmware, and third-party software lifecycles.
• Ability to analyze large data from endpoint-management and vulnerability-scanning systems to validate scope and identify gaps.
• Knowledge of patch testing, release sequencing, rollback, backup verification, and disaster-recovery considerations.
• Understanding vulnerability severity, remediation SLAs, exception governance, and audit requirements.
• Experience with modern automation or AI-assisted engineering tools.

Responsibilities

• Plan, coordinate, and execute OS, third-party app, firmware, and agent patching across enterprise infrastructure and endpoints.
• Administer and improve patching, endpoint-management, application-deployment, imaging, and provisioning platforms.
• Define testing groups, deployment rings, maintenance windows, validation checks, reboot controls, rollback criteria, and emergency patching practices.
• Package and deploy enterprise applications with repeatable installation, upgrade, removal, validation, and rollback processes.
• Investigate and remediate failed patches, unhealthy clients, missing agents, unmanaged assets, and inventory gaps.
• Automate patching, compliance reporting, pre-patch validation, and recurring operational activities.
• Drive cross-team alignment on priorities, SLAs, and handoffs across Infrastructure, Cybersecurity, Network, Database, and Operations.
• Maintain risk-based remediation, change-control, backup, and rollback practices including an exception register.
• Define KPIs and produce dashboards, runbooks, and technical documentation for compliance and remediation trends.
• Provide technical leadership, mentor engineers, and lead emergency remediation exercises.

Skills

Windows admin

Linux admin

PowerShell

Bash

Python

Deployment automation

MSI/MSIX packaging

SCCM/MECM

Intune

Vulnerability remediation

Change control

Zero-day response

Automation tooling

Education

Bachelor’s degree in computer science or related field

Tools

SCCM/MECM

Intune

Patch Manager Plus

Rapid7

Autopilot

Imaging and task sequences

Job description

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 17,000, and has 58 offices in 22 countries within key global markets.

The Patch Management & Application Deployment Engineer is a hands-on infrastructure engineering responsible for enterprise patch management, application deployment, vulnerability remediation, and continuous improvement across Windows and Linux servers, corporate endpoints, virtual machines, cloud-hosted systems, and clustered environments. The role combines systems administration, automation, change control, and operational risk management to protect business-critical services.

Requires 7-10 years of experience for mid-level candidates and 10-15 years of experience for senior level candidates, delivering or materially improving enterprise patch-management and application-deployment programs. Strong experience with endpoint-management platforms, operating system administration, software packaging, deployment automation, production change execution, and regulated or high-availability environments is required; trading-environment experience is highly desirable.

Required Experience

• Hands-on experience administering and patching Windows and Linux servers, desktops, laptops, virtual machines, cloud-hosted assets, and clustered systems.
• Experience operating enterprise endpoint-management and patching platforms such as SCCM/MECM, Intune, Patch Manager Plus, Rapid7, or equivalent technologies.
• Experience designing and executing deployment rings, maintenance windows, pre-patch checks, controlled reboots, post-patch validation, and rollback procedures.
• Experience packaging, deploying, upgrading, and removing enterprise applications using MSI, MSIX, Win32, executable, and script-based installers.
• Experience investigating failed deployments, unhealthy clients, missing agents, unmanaged assets, inventory discrepancies, and patch-coverage gaps.
• Strong understanding of vulnerability prioritization, remediation SLAs, exception management, zero-day response, and end-of-life software risk.
• Experience supporting business-critical systems with complex dependencies, restricted maintenance windows, backup requirements, and service-validation procedures.
• Strong automation experience using PowerShell and working knowledge of Bash, Python, Microsoft Graph, Ansible, or comparable technologies.
• Experience with change control, audit evidence, risk acceptance, rollback planning, operational reporting, and production support processes.
• Demonstrated ability to lead current-state assessments, establish baselines, define KPIs, and convert findings into prioritized remediation and continuous-improvement roadmaps.

Responsibilities

• Plan, coordinate, and execute operating system, third-party application, firmware, and agent patching across enterprise infrastructure and endpoints.
• Administer and improve patching, endpoint-management, application-deployment, imaging, task-sequence, and provisioning platforms.
• Define and apply testing groups, deployment rings, maintenance windows, validation checks, reboot controls, rollback criteria, and emergency patching practices.
• Package and deploy enterprise applications while ensuring repeatable installation, upgrade, removal, validation, and rollback processes.
• Investigate and remediate failed patches, unhealthy clients, missing management agents, unmanaged assets, overdue vulnerabilities, and inventory inconsistencies.
• Automate patching, compliance reporting, pre-patch validation, failed-client remediation, software deployment, and recurring operational activities.
• Drive agreement across Infrastructure, Cybersecurity, Application Security, Network, Database, Operations, Support, and application owners on priorities, ownership, maintenance windows, SLAs, escalation paths, dependencies, and operational handoffs.
• Maintain risk-based remediation, escalation, change-control, backup, and rollback practices, including a formal exception register with risk acceptance, compensating controls, accountable owners, expiration dates, and review status.
• Define KPIs and produce operational dashboards, leadership reporting, audit evidence, runbooks, deployment plans, and technical documentation covering compliance, exposure, deployment reliability, exceptions, asset coverage, and remediation trends.
• Provide technical leadership, improve platform strategy and operational processes, mentor engineers, and lead documented emergency and zero-day remediation exercises.

Qualifications

• Strong Windows and Linux administration skills, including services, package management, permissions, logging, networking, scripting, and troubleshooting.
• Advanced experience with SCCM/MECM and Intune; familiarity with Patch Manager Plus, Rapid7, Autopilot, imaging, and task sequences is highly desirable.
• Strong PowerShell skills and the ability to automate systems-management workflows; experience with Bash, Python, Microsoft Graph, or Ansible is a plus.
• Practical knowledge of software packaging formats and deployment methods, including MSI, MSIX, Win32, executable, and script-based installers.
• Understanding of virtualization, cloud infrastructure, clustered systems, enterprise identity, endpoint agents, firmware, and third-party software lifecycles.
• Ability to analyze and reconcile high-volume data from endpoint-management, vulnerability-scanning, directory, cloud, virtualization, and asset-inventory systems to validate scope and identify control gaps.
• Strong knowledge of patch testing, release sequencing, controlled reboot processes, service validation, backup verification, rollback testing, and disaster-recovery considerations.
• Understanding of vulnerability severity, remediation SLAs, compensating controls, exception governance, zero-day response, and audit requirements.
• Bachelor’s degree in computer science, information systems, cybersecurity, engineering, or equivalent professional experience.
• Demonstrable experience using modern automation or AI-assisted engineering tools while applying appropriate validation, security, and change-control practices.

We offer:

• A highly competitive compensation and benefits package.
• A multinational organization with 58 offices in 21 countries and the possibility to work abroad.
• 10 days of paid annual leave (plus sick leave and national holidays).
• Maternity & paternity leave plans.
• A comprehensive insurance plan including medical, dental, vision, life insurance, and long-/short-term disability (plans vary by region).
• Retirement savings plans.
• A higher education certification policy.
• Commuter benefits (varies by region).
• Extensive training opportunities, focused on skills, substantive knowledge, and personal development.
• On-demand Udemy for Business for all Synechron employees with free access to more than 5000 curated courses.
• Coaching opportunities with experienced colleagues from our Financial Innovation Labs (FinLabs) and Center of Excellences (CoE) groups.
• Cutting edge projects at the world’s leading tier-one banks, financial institutions and insurance firms.
• A flat and approachable organization.
• A truly diverse, fun-loving, and global work culture.

Diversity & Inclusion are fundamental to our culture, and Synechron is proud to be an equal opportunity workplace and is an affirmative action employer. Our Diversity, Equity, and Inclusion (DEI) initiative ‘Same Difference’ is committed to fostering an inclusive culture – promoting equality, diversity and an environment that is respectful to all. We strongly believe that a diverse workforce helps build stronger, successful businesses as a global company. We encourage applicants from across diverse backgrounds, race, ethnicities, religion, age, marital status, gender, sexual orientations, or disabilities to apply. We empower our global workforce by offering flexible workplace arrangements, mentoring, internal mobility, learning and development programs, and more.

All employment decisions at Synechron are based on business needs, job requirements and individual qualifications, without regard to the applicant’s gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law.