Patch Management & Deployment Engineer

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & Dev Ops, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our Fin Labs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more.

Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 17,000, and has 58 offices in 22 countries within key global markets.

The Patch Management & Application Deployment Engineer is a hands-on infrastructure engineering responsible for enterprise patch management, application deployment, vulnerability remediation, and continuous improvement across Windows and Linux servers, corporate endpoints, virtual machines, cloud-hosted systems, and clustered environments. The role combines systems administration, automation, change control, and operational risk management to protect business-critical services.

Requires 7-10 years of experience for mid-level candidates and 10-15 years of experience for senior level candidates, delivering or materially improving enterprise patch-management and application-deployment programs. Strong experience with endpoint-management platforms, operating system administration, software packaging, deployment automation, production change execution, and regulated or high-availability environments is required; trading-environment experience is highly desirable.

• Hands-on experience administering and patching Windows and Linux servers, desktops, laptops, virtual machines, cloud-hosted assets, and clustered systems.
• Experience operating enterprise endpoint-management and patching platforms such as SCCM/MECM, Intune, Patch Manager Plus, Rapid7, or equivalent technologies.
• Experience designing and executing deployment rings, maintenance windows, pre-patch checks, controlled reboots, post-patch validation, and rollback procedures.
• Experience packaging, deploying, upgrading, and removing enterprise applications using MSI, MSIX, Win
  32, executable, and script-based installers.
• Experience investigating failed deployments, unhealthy clients, missing agents, unmanaged assets, inventory discrepancies, and patch-coverage gaps.
• Strong understanding of vulnerability prioritization, remediation SLAs, exception management, zero-day response, and end-of-life software risk.
• Experience supporting business-critical systems with complex dependencies, restricted maintenance windows, backup requirements, and service-validation procedures.
• Strong automation experience using Power Shell and working knowledge of Bash, Python, Microsoft Graph, Ansible, or comparable technologies.
• Experience with change control, audit evidence, risk acceptance, rollback planning, operational reporting, and production support processes.
• Demonstrated ability to lead current-state assessments, establish baselines, define KPIs, and convert findings into prioritized remediation and continuous-improvement roadmaps.

• Plan, coordinate, and execute operating system, third-party application, firmware, and agent patching across enterprise infrastructure and endpoints.
• Administer and improve patching, endpoint-management, application-deployment, imaging, task-sequence, and provisioning platforms.
• Define and apply testing groups, deployment rings, maintenance windows, validation checks, reboot controls, rollback criteria, and emergency patching practices.
• Package and deploy enterprise applications while ensuring repeatable installation, upgrade, removal, validation, and rollback processes.
• Investigate and remediate failed patches, unhealthy clients, missing management agents, unmanaged assets, overdue vulnerabilities, and inventory inconsistencies.
• Automate patching, compliance reporting, pre-patch validation, failed-client remediation, software deployment, and recurring operational activities.
• Drive agreement across Infrastructure, Cybersecurity, Application Security, Network, Database, Operations, Support, and…