Patch Engineer - NIST

Description :

Experience : 8 to 12 years

Location : Bangalore

Job Description :

Patch Management & Lifecycle :

- Manages the complete patch lifecycle for servers, enterprise software, and desktop platforms, including evaluation, scheduling, testing, deployment, and rollback documentation.

- Creates, manages, and maintains patch calendars and endpoint version documentation for internal tracking and external audit readiness.

- Ensures all patching and upgrade activities align with frameworks from NIST (SP 800-40), NCUA, FFIEC, and GLBA regulations.

- Reports patch compliance metrics and prepare evidence to support audits, risk assessments, and security examinations.

Evaluation & Upgrade Execution :

- Evaluates vendor release notes and bulletins to identify security patches, OS updates, and version upgrades appropriate for enterprise infrastructure.

- Executes OS and application upgrades on both physical and virtual systems, ensuring minimal disruption and full compatibility.

- Help track network/security and misc. equipment patching. Part of an on-call and response team.

Virtual Desktop & Endpoint Maintenance :

- Maintains and applies updates to virtual desktop environments, including base image management and endpoint OS patching.

Collaboration & Impact Mitigation :

- Collaborates with IT teams and business units to ensure updates do not interfere with user productivity or application functionality.

- Performs other job-related duties as assigned.

Experience :

- Four or more years of experience in enterprise upgrade and patch management, including both server and desktop infrastructure environments.

- Hands-on experience with virtualization platforms such as VMware, Citrix, or Microsoft Hyper-V, including patching and updating guest OS images

- Familiarity with OS lifecycle management, software compatibility testing, and compliance documentation

- Understanding of patch documentation and audit activity within regulated environments, such as financial institutions