Senior Endpoint Engineer

Synechron; New York (NY); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive compensation package

Global offices & travel opportunities

Paid annual leave and holidays

Maternity & paternity leave

Comprehensive insurance plan

Retirement savings plans

Commuter benefits

Udemy for Business access

Coaching with FinLabs/CoE teams

Extensive training opportunities

Job summary

Synechron is seeking a Patch Management & Application Deployment Engineer to lead enterprise patching and deployment across Windows and Linux environments. The role emphasizes automation, change control, and risk-managed remediation in a regulated or high-availability setting.

You will design deployment rings, manage testing windows, and ensure successful patch validation with rollback capabilities, collaborating with Cybersecurity, Network, and Operations teams to minimize risk.

Qualifications

• Bachelor’s degree in computer science, information systems, cybersecurity, engineering, or equivalent professional experience.
• Strong experience administering Windows and Linux platforms, endpoints, and virtualized/cloud assets.
• Hands-on experience with enterprise patching and deployment tools (SCCM/MECM, Intune) and vulnerability remediation.
• Experience designing deployment rings, maintenance windows, patch validation, and rollback procedures.
• Automation experience using PowerShell; familiarity with Bash, Python, Graph, Ansible, or similar.
• Ability to analyze large data from endpoint-management and vulnerability scanners to identify gaps.
• Understanding of remediation SLAs, risk acceptance, and audit requirements.
• Experience leading cross-functional collaboration for remediation roadmaps and dashboards.

Responsibilities

• Plan and execute OS, application, firmware, and agent patching across enterprise infrastructure and endpoints.
• Improve patching, endpoint-management, imaging, and provisioning platforms.
• Define testing groups, deployment rings, maintenance windows, validation, reboots, rollback criteria, and emergency patching.
• Package and deploy enterprise applications with repeatable install and rollback processes.
• Investigate and remediate failed patches, missing agents, and inventory discrepancies.
• Automate patching, compliance reporting, and ongoing operational activities.
• Drive cross-team alignment on priorities, SLAs, escalation paths, and handoffs.
• Maintain risk-based remediation, change-control, backup, and rollback practices with formal exception registers.
• Define KPIs and produce dashboards, runbooks, and documentation for compliance and remediation trends.
• Provide technical leadership and mentor engineers during emergency remediation exercises.

Skills

Endpoint-management

Automation

Troubleshooting

vulnerability remediation

Change control

Education

Bachelor’s degree in CS/IS/Engineering or equivalent

Tools

SCCM/MECM

Intune

Patch Manager Plus

Rapid7

MSI/MSIX/Win32 installers

PowerShell

Bash/Python/Microsoft Graph/Ansible

Job description

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 17,000, and has 58 offices in 22 countries within key global markets.

The Patch Management & Application Deployment Engineer is a hands-on infrastructure engineering responsible for enterprise patch management, application deployment, vulnerability remediation, and continuous improvement across Windows and Linux servers, corporate endpoints, virtual machines, cloud-hosted systems, and clustered environments. The role combines systems administration, automation, change control, and operational risk management to protect business-critical services.

Requires 7-10 years of experience for mid-level candidates and 10-15 years of experience for senior level candidates, delivering or materially improving enterprise patch-management and application-deployment programs. Strong experience with endpoint-management platforms, operating system administration, software packaging, deployment automation, production change execution, and regulated or high-availability environments is required; trading-environment experience is highly desirable.

Required Experience

• Hands-on experience administering and patching Windows and Linux servers, desktops, laptops, virtual machines, cloud-hosted assets, and clustered systems.
• Experience operating enterprise endpoint-management and patching platforms such as SCCM/MECM, Intune, Patch Manager Plus, Rapid7, or equivalent technologies.
• Experience designing and executing deployment rings, maintenance windows, pre-patch checks, controlled reboots, post-patch validation, and rollback procedures.
• Experience packaging, deploying, upgrading, and removing enterprise applications using MSI, MSIX, Win32, executable, and script-based installers.
• Experience investigating failed deployments, unhealthy clients, missing agents, unmanaged assets, inventory discrepancies, and patch-coverage gaps.
• Strong understanding of vulnerability prioritization, remediation SLAs, exception management, zero-day response, and end-of-life software risk.
• Experience supporting business-critical systems with complex dependencies, restricted maintenance windows, backup requirements, and service-validation procedures.
• Strong automation experience using PowerShell and working knowledge of Bash, Python, Microsoft Graph, Ansible, or comparable technologies.
• Experience with change control, audit evidence, risk acceptance, rollback planning, operational reporting, and production support processes.
• Demonstrated ability to lead current-state assessments, establish baselines, define KPIs, and convert findings into prioritized remediation and continuous-improvement roadmaps.

Responsibilities

• Plan, coordinate, and execute operating system, third-party application, firmware, and agent patching across enterprise infrastructure and endpoints.
• Administer and improve patching, endpoint-management, application-deployment, imaging, task-sequence, and provisioning platforms.
• Define and apply testing groups, deployment rings, maintenance windows, validation checks, reboot controls, rollback criteria, and emergency patching practices.
• Package and deploy enterprise applications while ensuring repeatable installation, upgrade, removal, validation, and rollback processes.
• Investigate and remediate failed patches, unhealthy clients, missing management agents, unmanaged assets, overdue vulnerabilities, and inventory inconsistencies.
• Automate patching, compliance reporting, pre-patch validation, failed-client remediation, software deployment, and recurring operational activities.
• Drive agreement across Infrastructure, Cybersecurity, Application Security, Network, Database, Operations, Support, and application owners on priorities, ownership, maintenance windows, SLAs, escalation paths, dependencies, and operational handoffs.
• Maintain risk-based remediation, escalation, change-control, backup, and rollback practices, including a formal exception register with risk acceptance, compensating controls, accountable owners, expiration dates, and review status.
• Define KPIs and produce operational dashboards, leadership reporting, audit evidence, runbooks, deployment plans, and technical documentation covering compliance, exposure, deployment reliability, exceptions, asset coverage, and remediation trends.
• Provide technical leadership, improve platform strategy and operational processes, mentor engineers, and lead documented emergency and zero-day remediation exercises.

Qualifications

• Strong Windows and Linux administration skills, including services, package management, permissions, logging, networking, scripting, and troubleshooting.
• Advanced experience with SCCM/MECM and Intune; familiarity with Patch Manager Plus, Rapid7, Autopilot, imaging, and task sequences is highly desirable.
• Strong PowerShell skills and the ability to automate systems-management workflows; experience with Bash, Python, Microsoft Graph, or Ansible is a plus.
• Practical knowledge of software packaging formats and deployment methods, including MSI, MSIX, Win32, executable, and script-based installers.
• Understanding of virtualization, cloud infrastructure, clustered systems, enterprise identity, endpoint agents, firmware, and third-party software lifecycles.
• Ability to analyze and reconcile high-volume data from endpoint-management, vulnerability-scanning, directory, cloud, virtualization, and asset-inventory systems to validate scope and identify control gaps.
• Strong knowledge of patch testing, release sequencing, controlled reboot processes, service validation, backup verification, rollback testing, and disaster-recovery considerations.
• Understanding of vulnerability severity, remediation SLAs, compensating controls, exception governance, zero-day response, and audit requirements.
• Bachelor’s degree in computer science, information systems, cybersecurity, engineering, or equivalent professional experience.
• Demonstrable experience using modern automation or AI-assisted engineering tools while applying appropriate validation, security, and change-control practices.

We offer:

• A highly competitive compensation and benefits package.
• A multinational organization with 58 offices in 21 countries and the possibility to work abroad.
• 10 days of paid annual leave (plus sick leave and national holidays).
• Maternity & paternity leave plans.
• A comprehensive insurance plan including medical, dental, vision, life insurance, and long-/short-term disability (plans vary by region).
• Retirement savings plans.
• A higher education certification policy.
• Commuter benefits (varies by region).
• Extensive training opportunities, focused on skills, substantive knowledge, and personal development.
• On-demand Udemy for Business for all Synechron employees with free access to more than 5000 curated courses.
• Coaching opportunities with experienced colleagues from our Financial Innovation Labs (FinLabs) and Center of Excellences (CoE) groups.
• Cutting edge projects at the world’s leading tier-one banks, financial institutions and insurance firms.
• A flat and approachable organization.
• A truly diverse, fun-loving, and global work culture.

Diversity & Inclusion are fundamental to our culture, and Synechron is proud to be an equal opportunity workplace and is an affirmative action employer. Our Diversity, Equity, and Inclusion (DEI) initiative ‘Same Difference’ is committed to fostering an inclusive culture – promoting equality, diversity and an environment that is respectful to all. We strongly believe that a diverse workforce helps build stronger, successful businesses as a global company. We encourage applicants from across diverse backgrounds, race, ethnicities, religion, age, marital status, gender, sexual orientations, or disabilities to apply. We empower our global workforce by offering flexible workplace arrangements, mentoring, internal mobility, learning and development programs, and more.

All employment decisions at Synechron are based on business needs, job requirements and individual qualifications, without regard to the applicant’s gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law.