TS-Cleared Vulnerability Patch Engineer

IntelliDyne, LLC; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

401(K) with company match

Flexible Paid Time Off

11 holidays

Paid parental leave

Military leave

Government shutdown leave

Wellness programs

Commuter benefits

Flexible work options

Job summary

IntelliDyne, LLC in Washington, DC seeks a detail-oriented Vulnerability Management Engineer to own the end-to-end patching lifecycle across enterprise systems.

You will deploy patches using MECM and IBM BigFix, analyze Tenable reports with Splunk, and coordinate with government system owners during off-hours maintenance windows. This role requires onsite presence 2–3 days weekly and active TS clearance; strong communication and independent work are essential in this fast-paced environment.

Qualifications

• 5+ years of hands-on experience in vulnerability management, patch management, or security-focused systems administration.
• BS degree in computer science or related field.
• Active TS clearance.
• M365A certification.
• Proven experience deploying and managing patches using MECM/SCCM.
• Strong working knowledge of IBM BigFix for endpoint patching and compliance.
• Experience reading, interpreting, and acting on vulnerability reports from Tenable.
• Familiarity with Splunk for searching logs, creating reports, and monitoring patching-related events.
• Solid understanding of the vulnerability management lifecycle (scanning, prioritization, remediation, and verification).
• Excellent communication and stakeholder management skills, with the ability to coordinate effectively with government customers and technical teams.
• Willingness and ability to work nights, weekends, and during off-hours as required for patching activities.

Responsibilities

• Plan, schedule, and execute patching activities using MECM and IBM BigFix across servers, workstations, and endpoints.
• Analyze vulnerability scan reports from Tenable and security/event data from Splunk to identify, prioritize, and track remediation of vulnerabilities.
• Develop and maintain patching schedules, maintenance windows, and deployment strategies that balance security requirements with operational needs.
• Coordinate closely with government system owners and application support teams to obtain approvals, schedule changes, communicate impact, and minimize service disruption.
• Work flexible hours, including nights, weekends, and on-call rotations, to perform patching during approved maintenance windows.
• Monitor patch compliance rates, generate metrics and status reports, and present findings to leadership and stakeholders.
• Investigate and resolve patching failures, deployment issues, and exceptions; perform root-cause analysis and implement corrective actions.
• Maintain accurate documentation of patching procedures, configurations, and remediation activities.
• Support vulnerability management program initiatives, including exception handling, risk acceptance processes, and continuous improvement efforts.
• Collaborate with security, infrastructure, and application teams to ensure patches are tested and deployed in a controlled manner.

Skills

Vulnerability management

MECM/SCCM

IBM BigFix

Tenable

Splunk

Stakeholder management

Patching processes

Windows/Linux administration

Education

BS degree in computer science or related field

Tools

MECM

IBM BigFix

Tenable

Splunk

PowerShell

Job description

IntelliDyne, LLC in Washington, DC seeks a detail-oriented Vulnerability Management Engineer to own the end-to-end patching lifecycle across enterprise systems.

You will deploy patches using MECM and IBM BigFix, analyze Tenable reports with Splunk, and coordinate with government system owners during off-hours maintenance windows. This role requires onsite presence 2–3 days weekly and active TS clearance; strong communication and independent work are essential in this fast-paced environment.