Systems Engineer

The Systems Engineer - Patch Management is responsible for the execution, monitoring, troubleshooting, and continuous improvement of enterprise patching and vulnerability remediation activities. This role helps ensure Windows and Linux servers and workstations remain secure, compliant, and current with required operating system and security updates.

The engineer works closely with infrastructure, application, security, vulnerability management, and change management teams to resolve patching issues, remediate vulnerabilities, improve compliance, and increase automation across the patching lifecycle.

• Execute scheduled patching for Windows and Linux servers and workstations across development, test, and production environments.
• Deploy operating system and security updates using Microsoft Configuration Manager (MECM/SCCM), Ansible, Power Shell, Bash, and related automation tools.
• Monitor patch deployments and validate successful installation following scheduled maintenance windows.
• Maintain patching groups, deployment schedules, maintenance windows, and device targeting.
• Support accelerated patching and remediation of critical and internet-facing vulnerabilities requiring shortened remediation timelines.
• Track patch compliance and remediation progress against established SLAs, security requirements, and compliance targets.
• Identify and remediate systems that are:
• Non-compliant
• Missing required patches
• Offline or unreachable
• Experiencing recurring patch failures
• Pending required reboots
• Outside approved maintenance windows
• Troubleshoot patching and deployment failures, including client health, connectivity, disk space, installation, reboot, configuration, and dependency issues.
• Perform manual remediation when automated patching is unsuccessful.
• Validate system health and patch compliance following remediation activities.
• Provide patching status, exception, failure, and remediation reporting.
• Identify recurring patch failures, operational gaps, and opportunities for automation.
• Develop and support automation using Power Shell, Ansible, Bash, or similar technologies.
• Reduce manual patching and remediation activities through standardized and repeatable automation.
• Improve patch deployment success rates and reduce recurring failure conditions.
• Maintain patching documentation, operational runbooks, troubleshooting procedures, and knowledge articles.
• Escalate complex technical issues to senior engineering or platform teams when appropriate.

• 3+ years of experience in systems administration, infrastructure operations, patch management, or a related technical role.
• Hands-on experience supporting Windows Server and/or Linux environments.
• Experience with enterprise patch management and automation technologies, including:
• MECM/SCCM
• Ansible
• Power Shell and/or Bash
• Experience troubleshooting operating system patching, deployment, and remediation failures.
• Understanding of vulnerability management, security remediation, CVEs, and patch compliance concepts.
• Working knowledge of Active Directory, DNS, networking, server infrastructure, and virtualization technologies.
• Experience working within formal change management and production support processes.
• Ability to analyze patch compliance data, identify remediation priorities, and drive issues to resolution.
• Ability to work independently on Level 2 incidents and remediation activities while appropriately escalating complex issues.

• Experience with vulnerability management platforms such as Qualys.
• Experience with Service Now for incidents, changes, requests, and remediation tracking.
• Experience developing patching or infrastructure automation.
• Experience supporting large-scale enterprise server and workstation environments.
• Familiarity with vulnerability remediation SLAs and accelerated patching processes for critical or externally exposed systems.

This role is not eligible for work visa sponsorship.

Work at Home Requirements:
To ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria:
At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. In certain roles, the minimum recommended internet speed required by Humana may not be sufficient for business needs. Humana reserves the right to…