Remote Windows Patch & Remediation Engineer

CBTS; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

CBTS is seeking a Windows Vulnerability Remediation Engineer to accelerate patching and remediation across Windows Server 2016/2019/2022 in a 100% remote capacity. The role emphasizes automation and collaboration with Operations, Engineering, and application teams to deliver timely fixes while maintaining server stability.

Responsibilities include end-to-end remediation, coordinating monthly security updates, developing automation with Chef, Ansible, PowerShell, and Ruby, and ensuring compliance

Qualifications

• 6–10 years of hands-on Windows Server experience.
• Proven vulnerability remediation and patch management experience.
• Expertise with Qualys scanning and remediation workflows.
• Automation proficiency using Chef and/or Ansible in production.
• Strong PowerShell and Ruby scripting abilities.
• Experience with change management and cross-team coordination.

Responsibilities

• Vulnerability remediation & patch management for Windows servers (2016/2019/2022).
• Own and execute end-to-end remediation, including OS patching and configuration hardening.
• Fast-track Meridian-related remediation per SLAs and audit expectations.
• Triage findings from Qualys and translate into remediation plans.
• Coordinate remediation activities for Microsoft security updates and reboots.
• Implement configuration hardening aligned to baselines and security controls.
• Develop automation using Chef, Ansible, PowerShell, and Ruby; convert manual steps into runbooks.
• Ensure code quality with version control, reviews, testing and documentation.

Skills

Windows Server 2016/2019/2022

Qualys

Chef

Ansible

PowerShell

Ruby

Scripting

Change Management

Communication

Tools

Qualys

Chef

Ansible

Job description

CBTS is seeking a Windows Vulnerability Remediation Engineer to accelerate patching and remediation across Windows Server 2016/2019/2022 in a 100% remote capacity. The role emphasizes automation and collaboration with Operations, Engineering, and application teams to deliver timely fixes while maintaining server stability.

Responsibilities include end-to-end remediation, coordinating monthly security updates, developing automation with Chef, Ansible, PowerShell, and Ruby, and ensuring compliance