Senior Patch Orchestration Engineer – Hybrid Data Center

HCLTech; Cary (NC); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Retirement plan (401(k)

Paid time off

Paid holidays

Job summary

HCLTech is seeking an L2 Senior Patch Management Engineer to own patch lifecycle across hybrid data centers (physical, virtual, cloud). You will manage tooling, automate patch workflows, and prioritize vulnerabilities based on CVSS and business impact.

The role requires deep expertise in Windows/Linux patching, virtualization, and CMDB maintenance, with collaboration across application, DBA, and storage teams to ensure patching with minimal downtime.

Qualifications

• Experience managing patching for Windows Server and Linux (RHEL/Ubuntu/SUSE).
• Hands-on with WSUS, SCCM SUP, Red Hat Satellite, and Ansible.
• Strong scripting skills in PowerShell and Bash; automation experience.
• Familiarity with vulnerability scanning (Qualys/Tenable) and CVE mapping.

Responsibilities

• Manage end-to-end patch lifecycle for Windows and Linux servers.
• Maintain patch tooling and automation scripts.
• Analyse CVE data and prioritize patches by CVSS.
• Coordinate with apps/DB/storage teams for downtime-free patching.
• Drive patch compliance against SLAs.
• Maintain CMDB accuracy and present dashboards.

Skills

Windows Server administration

Linux skills

PowerShell scripting

Bash scripting

Analytical skills

Communication skills

Education

Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800/AZ-801)

VMware Certified Professional – Data Center Virtualisation (VCP-DCV)

CompTIA Security+ or CySA+

ITIL 4 Foundation

Tools

WSUS

SCCM SUP

Red Hat Satellite

Ansible

vSphere

Hyper-V

AWS SSM Patch Manager

Azure Update Manager

Qualys

Tenable Nessus

ServiceNow

Job description

HCLTech is seeking an L2 Senior Patch Management Engineer to own patch lifecycle across hybrid data centers (physical, virtual, cloud). You will manage tooling, automate patch workflows, and prioritize vulnerabilities based on CVSS and business impact.

The role requires deep expertise in Windows/Linux patching, virtualization, and CMDB maintenance, with collaboration across application, DBA, and storage teams to ensure patching with minimal downtime.