About this role
Senior Patching Engineer
Location: Remote
6-month Contract-to-hire
Compensation: $34-38/hr (Final compensation will be dependent on experience and skillset)
ABOUT THE ROLE
Our client is seeking a Senior Patching Engineer to lead patch strategy and vulnerability management across a large-scale federal environment. This position is responsible for the end-to-end patching lifecycle, including identification, testing, deployment, rollback, and audit of patches for on-premises, cloud, and hybrid systems. They will monitor federal advisories and vulnerability databases (including CVEs, KEVs, and NIST NVDs), manage image development and mitigations when vendor patches are unavailable, and ensure compliance with federal standards and timelines. The role also involves performing post-deployment validation to verify system functionality and security posture, managing parallel packaging across multiple environments, and providing senior-level guidance to junior engineers. The ideal candidate will have extensive experience with enterprise patching tools such as SCCM, RedHat Satellite, and IBM BigFix, and a strong background in both Windows and Linux platforms. A BA/BS in Computer Science, Engineering, or a related field and a current or prior Public Trust clearance are required.
WHAT YOU'LL DO
#LI-EK1
Location: Remote
6-month Contract-to-hire
Compensation: $34-38/hr (Final compensation will be dependent on experience and skillset)
ABOUT THE ROLE
Our client is seeking a Senior Patching Engineer to lead patch strategy and vulnerability management across a large-scale federal environment. This position is responsible for the end-to-end patching lifecycle, including identification, testing, deployment, rollback, and audit of patches for on-premises, cloud, and hybrid systems. They will monitor federal advisories and vulnerability databases (including CVEs, KEVs, and NIST NVDs), manage image development and mitigations when vendor patches are unavailable, and ensure compliance with federal standards and timelines. The role also involves performing post-deployment validation to verify system functionality and security posture, managing parallel packaging across multiple environments, and providing senior-level guidance to junior engineers. The ideal candidate will have extensive experience with enterprise patching tools such as SCCM, RedHat Satellite, and IBM BigFix, and a strong background in both Windows and Linux platforms. A BA/BS in Computer Science, Engineering, or a related field and a current or prior Public Trust clearance are required.
WHAT YOU'LL DO
- Own patch strategy and monitor vulnerability sources, including federal advisories, CVEs, KEVs, and NIST NVDs
- Lead image development and maintenance; coordinate mitigations when vendor patches are unavailable
- Perform post-deployment validation to verify system functionality and security posture
- Manage the full patching lifecycle: identification, testing, packaging, approval coordination, deployment, rollback execution, and audit trail maintenance
- Oversee parallel patch packaging across multiple environments, ensuring compliance with federal timelines and preventing backlog accumulation
- Utilize enterprise patching tools (SCCM, RedHat Satellite, IBM BigFix) for deployment and configuration auditing on Windows and Linux platforms
- Provide senior-level guidance to journeyman engineers on complex patching scenarios and escalation resolution
- 7+ years of experience in patch management or vulnerability engineering in a federal environment
- Hands-on experience with SCCM, RedHat Satellite, and IBM BigFix
- Experience operating across Windows and Linux platforms in large-scale endpoint environments
- BA/BS in Computer Science, Engineering, or related field
- Prior or current Public Trust clearance
#LI-EK1