Windows Engineer

About Cognizant

Cognizant is one of the world’s leading professional services companies, helping organizations modernize infrastructure, reduce operational risk, and operate secure, reliable enterprise environments. Cognizant delivers scalable, resilient technology solutions across regulated and complex IT landscapes.

The Windows Engineer serves as a technical lead responsible for the design, automation, and operation of enterprise Windows environments. This role owns the end‑to‑end patch management lifecycle for Windows endpoints and servers, driving standardization, automation, and measurable risk reduction while supporting Windows Server workloads and broader infrastructure initiatives.

• Serve as technical lead for the enterprise Windows Patch Management Program.
• Define and maintain patching standards, tooling patterns, and operating procedures.
• Plan and execute recurring patch cycles, including intake, testing, phased deployment, validation, and reporting.
• Engineer and maintain automated patching workflows using Microsoft SCCM/MECM and Intune.
• Coordinate cross‑platform patching schedules with Linux, network, and infrastructure teams.
• Integrate vulnerability remediation findings into patch prioritization and exception management processes.
• Develop and deliver compliance reporting and dashboards, including coverage, SLA adherence, and trend analysis.
• Perform incident and problem follow‑up related to patch failures or system impact, including root‑cause analysis.
• Partner with change management teams to ensure controlled and well‑communicated deployments.
• Deploy and manage Windows Server workloads in AWS in coordination with infrastructure and security requirements.
• Create and maintain audit‑ready documentation, runbooks, and standard operating procedures.
• Provide after‑hours support for critical incidents and time‑sensitive security patch events.

• Minimum of 5 years of experience administering enterprise Windows environments.
• Demonstrated experience leading or supporting a patch management program at scale.
• Strong expertise in Windows Server and Windows endpoint administration.
• Hands‑on experience with Microsoft SCCM/MECM and Intune in production environments.
• Experience with automation and scripting, with Power Shell preferred.
• Experience integrating patching with vulnerability management and compliance reporting.
• Strong organizational, communication, and problem‑solving skills.
• Ability to coordinate effectively across infrastructure, security, and application teams.

• Experience managing Windows Server workloads in AWS.
• Experience with enterprise endpoint management and software lifecycle tooling.
• Familiarity with IT service design, change management, and operational governance.
• Exposure to compliance‑driven or regulated IT environments.

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring 3 days a week in our office in Blue Ash, Ohio. Regardless of your working arrangement, we are here to support a healthy work-life balance though our various wellbeing programs.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.

Candidates must be legally authorized to work in the United States. Due to the nature of the work, U.S. citizenship or permanent residence may be required, along with eligibility to obtain a U.S. government security clearance.