Patch Engineer

Location:

Detroit, MI 48226

Work Schedule:

Full-Time | Hybrid
Hybrid

Schedule:

Monday & Friday Remote | Tuesday–Thursday Onsite

Employment Type:

Long-Term Contract

Sirius Staffing is seeking an experienced OT Patch Engineer for a long-term hybrid contract opportunity in Detroit, MI. This role is responsible for planning, deploying, and validating patches across Windows servers, workstations, and infrastructure supporting Operational Technology environments, including DCS, SCADA, and PI systems.

The Patch Engineer will work closely with engineering, operations, cybersecurity, IT, site leadership, and third-party vendors to ensure systems are patched within required compliance windows while maintaining system availability, reliability, and operational continuity.

This is a hybrid position requiring onsite work in Detroit Tuesday through Thursday, with remote work Monday and Friday.

• Plan and coordinate patching schedules for OT systems, servers, and workstations.
• Coordinate maintenance windows and patching activities with engineering, operations, cybersecurity, IT, and site leadership.
• Obtain required approvals prior to patch deployment.
• Identify and evaluate applicable operating system, application, security, and antivirus patches.
• Assess patch compatibility, cybersecurity requirements, and potential operational risks.
• Perform vulnerability or patch scans to identify systems requiring remediation.
• Apply approved patches to servers, workstations, and other supported OT infrastructure.
• Place systems into maintenance mode when required and follow established change-management and deployment procedures.
• Verify system functionality following patch installation.
• Ensure systems are successfully returned to full operational status after maintenance.
• Perform post-patch scans and validation activities.
• Troubleshoot and support recovery when patching causes unexpected system or application issues.
• Maintain accurate patching records, checklists, change documentation, and supporting evidence.
• Support cybersecurity compliance and audit-readiness requirements.
• Assist with system upgrades, antivirus updates, lifecycle management, and infrastructure improvements.
• Support system backup and recovery activities.
• Coordinate patching during planned outages and scheduled maintenance windows.
• Work collaboratively with internal technical teams and external vendors to minimize operational disruption.

• Experience supporting Operational Technology (OT), Industrial Control Systems (ICS), or industrial automation environments.
• Experience with one or more of the following:
  • DCS – Distributed Control Systems
  • SCADA systems
  • OSIsoft/AVEVA PI System or PI infrastructure
• Hands‑on experience performing server and workstation patching.
• Experience using enterprise patch-management, deployment, or vulnerability-management tools.
• Knowledge of Windows-based servers and workstations in industrial or mission‑critical environments.
• Understanding of cybersecurity requirements, vulnerability remediation, and secure system maintenance.
• Ability to assess patch compatibility and operational risk prior to deployment.
• Experience performing post‑patch validation and system recovery.
• Strong troubleshooting and problem‑solving skills.
• Strong documentation skills with the ability to maintain accurate records for compliance and audit purposes.
• Strong communication skills and the ability to coordinate activities across technical and operational teams.

• Previous experience supporting OT or ICS environments within:
  • Utilities or power generation
  • Manufacturing
  • Chemical or petrochemical facilities
  • Oil and gas
  • Water/wastewater
  • Automotive manufacturing
  • Other critical‑infrastructure environments
• Experience with backup and recovery processes.
• Experience with cybersecurity compliance frameworks applicable to critical infrastructure.
• Familiarity with patch‑management tools such as Microsoft SCCM/MECM, WSUS, Ivanti, Big Fix, Tanium, or similar platforms.
• Experience with vulnerability‑scanning platforms such as Tenable/Nessus, Qualys, Rapid7, or similar tools.

• Patches are deployed within established cybersecurity…