Systems Patch Engineer

Kforce Inc; Salt Lake City (UT); On-site; USD 90,000 - 130,000; Full time

Job summary

Kforce's client in Salt Lake City is seeking a Systems Patch Engineer to own and optimize our enterprise patch management program, improving security, stability, and compliance.

You will administer Tanium modules, patch Windows/ Linux/macOS and third‑party apps, and collaborate across IT, security, and audits.

This role requires 3–5 years in enterprise IT with strong scripting and documentation skills, and familiarity with GLBA/FFIEC/ISO 27001 in financial services contexts.

Qualifications

• 3–5 years of enterprise IT systems administration focusing on patch and vulnerability management.
• Hands-on Tanium administration experience (Patch, Deploy, Comply).
• Experience patching Windows Servers/Desktops, Linux, macOS, and 3rd‑party apps.

Responsibilities

• Administer and maintain Tanium Patch, Deploy, and Comply modules.
• Plan and deploy OS and third-party patches across enterprise environments.
• Monitor, troubleshoot, and remediate failed patch deployments.
• Track patch compliance metrics for IT and security leadership.
• Develop runbooks and technical documentation.
• Provide Tier 2/3 support for patching and endpoint remediation.

Skills

Patch management

Scripting: PowerShell/Bash

Analytical thinking

Documentation

Communication

Tools

Tanium (Patch/Deploy/Comply)

Job description

Responsibilities

Kforce's client is seeking a Systems Patch Engineer to join their Technology team in SLC, UT. In this role, you will own and optimize our enterprise patch management program, helping ensure the security, stability, and compliance of systems across the organization. What You'll Do:

• Administer, configure, and maintain the Tanium platform, including Patch, Deploy, and Comply modules
• Plan, schedule, test, and deploy operating system and third-party application patches across enterprise environments
• Design and manage patch deployment rings, maintenance windows, and blackout periods
• Monitor, troubleshoot, and remediate failed patch deployments in collaboration with infrastructure, cybersecurity, and application teams
• Track patch compliance metrics and support reporting for IT and security leadership
• Develop and maintain technical documentation, operational procedures, and runbooks
• Provide Tier 2/3 support for patching and endpoint remediation issues
• Participate in audits, risk assessments, and regulatory compliance initiatives
• Support change management, incident response, and disaster recovery activities

Requirements

• 3-5 years of experience in enterprise IT systems administration with a focus on patch and vulnerability management
• Hands‑on experience administering Tanium, including Patch, Deploy, and Comply modules
• Knowledge of vulnerability management practices, including CVE/CVSS prioritization, patch testing, and compliance reporting
• Experience patching Windows Servers, Windows desktops, Linux systems, macOS devices, and third‑party applications
• Proficiency with PowerShell and/or Bash scripting for automation and reporting
• Understanding of security and regulatory frameworks applicable to financial services environments, including GLBA, FFIEC, and ISO 27001
• Strong troubleshooting, analytical, communication, and documentation skills

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.