Bigfix Patch engineer

Bigfix Patch Engineer

Position:
Bigfix Patch Engineer

Location:

Atlanta, GA (Onsite)

Duration: C2C Contract

Job Description:

• 5+ years of experience in IT patch management, with a specific focus on using IBM Big Fix.

• Knowledge of Qualys or Nessus Agent or similar vulnerability management tool.

• Analysis of CVE score and prioritize the patches to be applied.

• Experience and knowledge in creating tasks, actions, fixlets and baselines in Bigfix for patch management.

• Experience and extensive knowledge of use of relevance language.

• Work experience with Powershell, Bash or VB scripting.

• Use of Power BI dashboards to monitor and report on the patches.

• Extensive experience with Windows and Linux operating systems, including patching and system administration.

• Strong knowledge of IT security principles, best practices, and regulatory requirements.

• Proficiency with IBM Big Fix, including deployment, management, automation, and reporting.

• Excellent problem-solving and analytical skills, with the ability to troubleshoot complex issues.

• Strong organizational and time management skills, with the ability to manage multiple priorities effectively and independently.

• Effective communication and interpersonal skills, with the ability to work collaboratively with cross-functional teams.

• IBM Certified Deployment Professional - Big Fix certification is a must.

Responsibilities:

• Planning and Scheduling:
Develop detailed patch management plans and schedules using IBM Big Fix, ensuring minimal disruption to business operations.

• Deployment:
Execute the deployment of patches to servers, workstations, and other IT infrastructure components, ensuring all systems are up-to-date and secure.

• Policy Development:
Create and maintain comprehensive patch management policies and procedures tailored to Big Fix environments.

• Patch Baselines:
Establish and manage patch baselines and compliance policies within Big Fix, ensuring consistency and reliability.

• Compliance Monitoring:
Use Big Fix and PowerBI dashboards and tools to continuously monitor systems for patch compliance and identify security vulnerabilities.

• Reporting:
Generate and distribute detailed reports on patch status, compliance levels, and any arising issues, providing insights to management and stakeholders.

• Documentation:
Maintain accurate and thorough documentation of all patching activities, compliance metrics, and system statuses.

• Testing and Validation:
Test patches in a controlled staging environment to evaluate their impact on system performance and compatibility with existing applications.

• Validation Coordination:
Work closely with application and system owners to validate patches in production environments, ensuring they meet operational standards.

• Rollback Procedures:
Develop and implement rollback procedures to revert patches if necessary, ensuring business continuity and minimizing downtime.

• Incident Response:
Promptly investigate and resolve patch-related incidents and issues, coordinating with relevant IT teams as needed.

• Vulnerability Management:
Collaborate with security and operations teams to address vulnerabilities identified through Big Fix, implementing appropriate remediation measures.

• Incident Reviews:
Participate in post-incident reviews, providing insights and recommendations to prevent future occurrences.

• Collaboration and Communication:
Work closely with other IT teams, including security, network, and application teams, to coordinate patching activities and resolve dependencies.

• Stakeholder Communication:
Communicate patching schedules, potential impacts, and status updates to relevant stakeholders, ensuring transparency and effective planning.

• Training and Guidance:
Provide guidance and training to other IT staff on patch management best practices and the effective use of Big Fix.

• Continuous improvement:
Keep up-to-date with the latest security threats, patch management technologies, and updates to IBM Big Fix.

• Process Improvement:
Identify and implement improvements to the patch management process, leveraging automation and other best practices.

• Audit Participation:
Participate in internal and external audits and reviews related to patch management, ensuring compliance with regulatory and organizational standards.

• Digital:
Google Data Engineering.