Bigfix Patch engineer

Bigfix Patch Engineer

Location:

Atlanta, GA (Onsite) Duration: C2C Contract

5+ years of experience in IT patch management, with a specific focus on using IBM Big Fix.

Knowledge of Qualys or Nessus Agent or similar vulnerability management tool.

Analysis of CVE score and prioritize the patches to be applied.

Experience and knowledge in creating tasks, actions, fixlets and baselines in Bigfix for patch management.

Experience and extensive knowledge of use of relevance language.

Work experience with Powershell, Bash or VB scripting.

Use of Power BI dashboards to monitor and report on the patches.

Extensive experience with Windows and Linux operating systems, including patching and system administration.

Strong knowledge of IT security principles, best practices, and regulatory requirements.

Proficiency with IBM Big Fix, including deployment, management, automation, and reporting.

Excellent problem-solving and analytical skills, with the ability to troubleshoot complex issues.

Strong organizational and time management skills, with the ability to manage multiple priorities effectively and independently.

Effective communication and interpersonal skills, with the ability to work collaboratively with cross-functional teams.

IBM Certified Deployment Professional - Big Fix certification is a must.

Planning and Scheduling:
Develop detailed patch management plans and schedules using IBM Big Fix, ensuring minimal disruption to business operations.

Deployment:
Execute the deployment of patches to servers, workstations, and other IT infrastructure components, ensuring all systems are up-to-date and secure.

Policy Development:
Create and maintain comprehensive patch management policies and procedures tailored to Big Fix environments.

Patch Baselines:
Establish and manage patch baselines and compliance policies within Big Fix, ensuring consistency and reliability.

Compliance Monitoring:
Use Big Fix and PowerBI dashboards and tools to continuously monitor systems for patch compliance and identify security vulnerabilities.

Reporting:
Generate and distribute detailed reports on patch status, compliance levels, and any arising issues, providing insights to management and stakeholders.

Documentation:
Maintain accurate and thorough documentation of all patching activities, compliance metrics, and system statuses.

Testing and Validation:
Staging Environment:
Test patches in a controlled staging environment to evaluate their impact on system performance and compatibility with existing applications.

Validation Coordination:
Work closely with application and system owners to validate patches in production environments, ensuring they meet operational standards.

Rollback Procedures:
Develop and implement rollback procedures to revert patches if necessary, ensuring business continuity and minimizing downtime.

Incident Response:
Promptly investigate and resolve patch-related incidents and issues, coordinating with relevant IT teams as needed.

Vulnerability Management:
Collaborate with security and operations teams to address vulnerabilities identified through Big Fix, implementing appropriate remediation measures.

Incident Reviews:
Participate in post-incident reviews, providing insights and recommendations to prevent future occurrences.

Collaboration and Communication:
Work closely with other IT teams, including security, network, and application teams, to coordinate patching activities and resolve dependencies.

Stakeholder Communication:
Communicate patching schedules, potential impacts, and status updates to relevant stakeholders, ensuring transparency and effective planning.

Training and Guidance:
Provide guidance and training to other IT staff on patch management best practices and the effective use of Big Fix.

Continuous improvement:
Keep up-to-date with the latest security threats, patch management technologies, and updates to IBM Big Fix.

Process Improvement:
Identify and implement improvements to the patch management process, leveraging automation and other best practices.

Audit Participation:
Participate in internal and external audits and reviews related to patch management, ensuring compliance with regulatory and organizational standards.

Digital:
Google Data Engineering