Windows Patch & Remediation Engineer

CBTS; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

CBTS is seeking a Windows Vulnerability Remediation Engineer to accelerate remediation and patching across server infrastructure (Windows Server 2016/2019/2022). You will leverage Qualys, Chef, Ansible, PowerShell, and Ruby to identify, prioritize, and close vulnerabilities in line with Meridian requirements.

The role partners with Operations, Engineering, application owners, and support teams to deliver timely fixes while maintaining server stability and change discipline, with emphasis on

Qualifications

• 6-10 years of hands-on Windows Server administration in enterprise environments.
• Experience driving vulnerability remediation and patch management for Windows servers.
• Experience with Qualys or similar vulnerability scanners and verification.
• Automation experience with Chef and/or Ansible on Windows servers.
• Strong scripting skills in PowerShell and shell scripting where applicable.
• Ruby knowledge to maintain and extend Chef remediation code.
• Understanding of Windows security fundamentals and change management processes.

Responsibilities

• Own end-to-end remediation for Windows server vulnerabilities, OS patching, and hardening.
• Triage findings from Qualys and translate into remediation plans.
• Coordinate patching and reboots with monthly and out-of-band updates.
• Develop and maintain remediation automation using Chef, Ansible, PowerShell, and Ruby.
• Ensure code follows standards: version control, peer review, testing, and change management.
• Validate remediation with re-scan and verification, document closure evidence.

Skills

Windows Server administration

Scripting (PowerShell)

Ruby coding

Cross-team collaboration

Change management coordination

Tools

Qualys

Chef

Ansible

PowerShell

Job description

CBTS is seeking a Windows Vulnerability Remediation Engineer to accelerate remediation and patching across server infrastructure (Windows Server 2016/2019/2022). You will leverage Qualys, Chef, Ansible, PowerShell, and Ruby to identify, prioritize, and close vulnerabilities in line with Meridian requirements.

The role partners with Operations, Engineering, application owners, and support teams to deliver timely fixes while maintaining server stability and change discipline, with emphasis on