Senior Patch Engineer – Windows & Compliance

First Citizens Bank; Tallahassee (FL); On-site; USD 90,000 - 120,000; Full time

Job summary

First Citizens Bank is seeking an experienced Patch Engineer to lead enterprise-wide patch management, vulnerability remediation, and compliance initiatives. You will specialize in BigFix, Windows 10/11 patching, and automation to improve efficiency and security across the fleet.

The role requires mentoring teams, collaborating with IT security, Infrastructure, and Operations, and delivering measurable patching performance and compliance results.

Qualifications

• 7+ years in workstation patch management and compliance.
• Deep experience with BigFix and PowerShell scripting.
• Strong knowledge of Windows 10/11 patching and deployment.
• Experience using WSUS and MEMCM for patch approvals and management.
• Familiarity with third-party patching tools (PMPC, Ivanti).
• Excellent troubleshooting and automation abilities.

Responsibilities

• Develop and implement enterprise patch management strategies.
• Evaluate vulnerabilities, determine patch criticality, ensure compatibility.
• Design and run tests for patches in controlled environments.
• Plan and execute patch rollouts across Windows 10/11 fleet; monitor progress.
• Remediate vulnerabilities promptly to ensure compliance.
• Troubleshoot failed patch installations and related issues.
• Develop scripts to automate patch deployment and remediation.
• Monitor, report, and improve patching program metrics.
• Collaborate with IT security, Infrastructure, and OEMs; maintain docs.

Skills

Patch management

Vulnerability remediation

Compliance

Windows 10/11 OS

PowerShell

Automation

Troubleshooting

Documentation

Team collaboration

Tools

BigFix

Active Directory

PowerShell scripting

WSUS

BigFix baseline

MEMCM

PMPC

Ivanti

Jira/Confluence

Job description

First Citizens Bank is seeking an experienced Patch Engineer to lead enterprise-wide patch management, vulnerability remediation, and compliance initiatives. You will specialize in BigFix, Windows 10/11 patching, and automation to improve efficiency and security across the fleet.

The role requires mentoring teams, collaborating with IT security, Infrastructure, and Operations, and delivering measurable patching performance and compliance results.