Jr Compliance Engineer PatchMyPC - MEXICO

Cirrus Labs Security Compliance Engineer – Workstation Patching

We are Cirrus Labs. Our vision is to become the world's most sought-after niche digital transformation company that helps customers realize value through innovation. Our mission is to co-create success with our customers, partners, and community. Our goal is to enable employees to dream, grow, and make things happen. We are committed to excellence. We are a dependable partner organization that delivers on commitments.

We strive to maintain integrity with our employees and customers. Every action we take is driven by value. The core of who we are is through our well-knit teams and employees.

You are the core of a values-driven organization. You have an entrepreneurial spirit. You enjoy working as a part of well-knit teams. You value the team over the individual. You welcome diversity at work and within the greater community. You aren't afraid to take risks. You appreciate a growth path with your leadership team that journeys how you can grow inside and outside of the organization.

You thrive upon continuing education programs that your company sponsors to strengthen your skills and for you to become a thought leader ahead of the industry curve. You are excited about creating change because your skills can help the greater good of every customer, industry, and community.

We are a trusted technology consultancy supporting a Fortune 50 enterprise IT organization in delivering a large-scale patch compliance transformation. We are building a high-performing team of Security Compliance Engineers to support patching, remediation, reporting, and tooling optimization across an enterprise workstation environment exceeding 215,000 Windows and Linux endpoints.

This team will play a central role in improving the client's overall endpoint security posture, reducing vulnerability exposure, and driving compliance maturity. Engineers will work in close coordination with an Architect-level lead and other infrastructure teams across the enterprise.

As a Security Compliance Engineer – Workstation Patching, you will join a five-person team responsible for designing, executing, and optimizing patch compliance processes across a large and diverse U.S.

-based workstation fleet. Your day-to-day responsibilities may include patch deployment, tooling configuration, proactive remediation strategy, or compliance reporting—depending on your area of specialization.

Each team member will bring deep expertise in one or more of the platform areas described below. As a team, you will manage tooling, build packages, automate patch jobs, identify reimage candidates, and report compliance status to stakeholders.

Responsibilities will vary by role but may include the following focus areas:

• Identify and enable auto-update for third-party applications
• Implement End-of-Life (EOL) software remediation and block lists
• Develop attack surface reduction strategies and controls to prevent reintroduction of known bad software
• Configure and execute patch deployments using tools like SCCM, Intune, Windows Autopatch, and PatchMyPC
• Build baseline patch packages and apply pre- and post-deployment scripting
• Remediate failed deployments and optimize targeting queries in patch management platforms
• Analyze data to identify patchable targets and unpatched systems
• Create historical trend analysis for compliance tracking
• Coordinate with CXO/Contact Center teams to flag systems for reimaging based on patch history and telemetry

Each member of the team will contribute specific expertise in one or more of the following focus areas:

• Qualys, Qualys VMDR
• Windows OS Patching:
  Windows Autopatch, SCCM
• Microsoft Office Patching:
  Cloud Update, SCCM
• Third-Party Application Patching:
  Patch
  
  MyPC, SCCM, Qualys VMDR, Nexthink

• 5+ years of experience in endpoint security, IT operations, or patch management in enterprise environments
• Strong hands-on expertise in one or more of the following platforms: SCCM, Intune, Windows Autopatch, Patch
  
  MyPC, Qualys, Nexthink, Cloud Update
• Experience deploying and troubleshooting Windows or Linux workstation patches
• Working knowledge of Power Shell or other scripting tools used in automation or system configuration
• Ability to interpret vulnerability data and apply remediation logic
• Strong collaboration and communication skills for working across distributed teams

• Experience in large enterprise environments with 100,000+ endpoints
• Familiarity with compliance standards (e.g., CIS Benchmarks, NIST)
• Experience supporting centralized patch engineering or compliance teams
• Experience with vulnerability management and risk orchestration tools, such as Brinqa and Vulcan