Patch Management Specialist

The Patch Management Specialist is responsible for the planning, deployment, and verification of system and application patches across enterprise Windows environments. The ideal candidate has strong experience with Windows operating systems, Microsoft Installer (MSI) package handling, and enterprise software deployment methods including SCCM (System Center Configuration Manager). They will work closely with IT, Cybersecurity, application owners, and other stakeholders to ensure timely remediation of vulnerabilities and maintain compliance with patching policies. The candidate must also be able to analyze Windows log files, utilize ticketing systems, and use automation tools such as PowerShell. Familiarity with vulnerability management tools like Nessus.

RESPONSIBILITES

• Perform end-to-end patch management lifecycle, including planning, deploying, validating, and troubleshooting patches on Windows workstations.
• Develop and implement patching strategies leveraging SCCM and custom deployment tools for enterprise update rollouts.
• Create, deploy, and troubleshoot MSI and other installer packages as needed.
• Analyze and interpret Windows event/log files to diagnose and resolve patch-related errors or installation failures.
• Use PowerShell to automate and streamline patching processes.
• Utilize ticketing systems to track, manage, and document patching activities, exceptions, and incidents.
• Coordinate with Vulnerability Management teams and utilize tools such as Nessus to identify, prioritize, and remediate vulnerabilities.
• Work closely with Information Security Officers and stakeholders to achieve and maintain patch compliance with VA and industry standards.
• Provide status reports and metrics on patch compliance, exceptions, and pending vulnerabilities.
• Participate in incident response activities related to vulnerabilities or patch deployment issues.
• Stay informed of emerging threats, vulnerabilities, and patch management best practices.
• Demonstrate technical capabilities and professional knowledge.
• Demonstrate ability to learn and adapt to new patching tools or methods.
• Capable of working under pressure and managing multiple priorities simultaneously.

PREFERRED QUALIFICATIONS/SKILLS

• Experience with Windows OS and application patching in a large, complex enterprise environment.
• Proficient with SCCM and patch deployment procedures.
• Familiarity with MSI packaging and silent install procedures.
• Skilled in analyzing Windows event/log files.
• Advanced PowerShell scripting capability for automation.
• Hands-on experience with ticketing systems.
• Knowledge of vulnerability scanning and remediation using Nessus or comparable tools.
• Strong documentation and communication skills.

REQUIRED QUALIFICATIONS

• Bachelor's degree in computer science, systems engineering, or related technical discipline is preferred.
• 10 years of experience in similar roles.
• 8 years of additional relevant experience may be substituted for education.
• Experience providing services to the federal government is preferred.
• Ability to work extra hours and weekends required on occasion.
• Must be a US Citizen and able to obtain a Public Trust.