Windows Patching & Automation Engineer

Blueprint is a technology solutions firm headquartered in Bellevue, Washington, with teams across the United States. We help organizations turn complex challenges into meaningful outcomes by connecting strategy and execution across AI, cloud, data, product development, and emerging technology.

Our culture is built by people who care deeply about doing exceptional work. We set high standards, take ownership, and continually challenge ourselves and one another to be better. We work hard, support each other, and take genuine pride in what we deliver for our clients, partners, and teams.

At Blueprint, you’ll work alongside talented people with different experiences, expertise, and perspectives. You’ll have opportunities to take on meaningful challenges, expand your skills, and see the impact of what you build.

Bring your perspective. Raise the standard. Build what matters.

Blueprint is seeking a Windows Patching & Automation Engineer to support patching, antivirus, and vulnerability compliance across a large, distributed Windows server environment.

This role requires hands‑on Power Shell scripting and automation experience, along with strong debugging and troubleshooting capabilities across multiple systems. You’ll use logs, telemetry, error codes, and deployment data to investigate failures, identify underlying causes, and support remediation.

You’ll help deliver Windows security patches, antivirus platform and signature updates, and .NET updates safely and consistently while collaborating with engineering, security, and compliance teams.

• Write, maintain, and troubleshoot Power Shell scripts supporting patch deployment, diagnostics, remediation, and reporting.
• Support monthly Windows security patch rollouts, including official and prerelease updates, antivirus updates, .NET updates, and related security and compliance components.
• Investigate Windows update and standalone update package (MSU) installation failures using Windows event logs, Component-Based Servicing (CBS) logs, installer logs, and error codes.
• Analyze logs and telemetry across multiple systems to identify failure patterns, isolate technical blockers, and determine appropriate remediation steps.
• Use Kusto Query Language (KQL) to investigate deployment results, monitor patch and vulnerability compliance, and identify systems requiring follow‑up.
• Verify installed Windows updates, packages, operating system versions, and relevant runtime versions.
• Build, validate, and publish patching components and packages while following safe deployment practices across deployment rings and environments.
• Troubleshoot deployment blockers related to machine state, network connectivity, capacity, installation failures, or environment‑specific conditions.
• Maintain dashboards, monitoring, compliance reporting, and clear investigation notes.
• Coordinate with partner teams to resolve exceptions, manual interventions, and technical blockers, escalating issues with supporting diagnostic evidence.

• Hands‑on experience with Power Shell scripting and automation
  , including writing, modifying, and debugging scripts.
• Understanding of Power Shell’s object‑based pipeline and common filtering methods, such as Where-Object.
• Strong debugging and troubleshooting capabilities across multiple systems
  , using logs and telemetry to investigate issues, narrow down causes, and determine practical next steps.
• Working knowledge of Windows update mechanisms, including Windows Update, Windows Server Update Services (WSUS), and manual MSU installation.
• Experience troubleshooting Windows update or package installation failures through event logs, servicing or installer logs, and error‑code investigation.
• Ability to verify installed Windows updates…