As a Patch Engineer, this role is integral to leading enterprise-wide patch management, vulnerability remediation, and compliance initiatives. The position leverages advanced expertise in MacOS enterprise tools like JAMF and BigFix, and vulnerability scanning tools like Qualys to secure enterprise systems. The engineer will play a technical member role along with mentoring teams for technical issues and help automate patching processes for improved efficiency and robust compliance.
About the Team:
First Citizens Bank is one of the top financial services providers, recognized and awarded for our customer satisfaction, sustainable profitability, and overall stability and security. Our associates make First Citizens Bank a great place for our clients to do business. Those who grow, achieve and succeed with First Citizens Bank are those who share our core values of integrity, service excellence and stability.
The patch management team is a cross-functional group focused on maintaining, optimizing, and securing enterprise endpoints. The team collaborates with IT security, infrastructure, and operations teams, working under critical deadlines to ensure uptime and compliance. Members contribute to a culture of continuous improvement, knowledge sharing, and operational excellence
Impact:
This Patch Engineer position is essential for enforcing security standards, ensuring compliance, and protecting the organization from threats. The role is pivotal in setting up automation and best practices in patching, participating in vulnerability remediation, and providing direction and mentorship to junior associates
Key Deliverables:
- Strategy Development: Creating and implementing comprehensive patch management strategies and policies for macOS devices.
- Patch Evaluation: Assessing vulnerabilities, determining patch criticality and impact, and ensuring compatibility with existing systems and applications.
- Testing: Designing and executing detailed test cases for patches in controlled environments to ensure functionality, stability, and compatibility.
- Deployment: Planning and executing the rollout of patches across the Mac fleet and monitoring the process for successful completion.
- Vulnerability Management: Identifying and deploying critical security patches in a timely manner to mitigate vulnerabilities and ensure compliance.
- Troubleshooting: Resolving issues with failed patch installations and other problems that arise during the patching process.
- Automation: Developing custom scripts (as needed) and leveraging automation tools to streamline patch deployment, vulnerability remediation, and compliance tracking.
- Monitoring & Reporting: Tracking patch compliance metrics and producing regular reports on the effectiveness and status of the patching program.
- Collaboration: Working closely with various internal teams and OEM vendor to align macOS devices with enterprise standards and address security threats.
- Documentation: Creating and maintaining documentation for patching procedures, troubleshooting steps, and user support knowledge bases.
- Reporting: Prepare / report patch compliance reports / metrics, as needed.
- Process/Standards: Adhere strictly to ITIL change, incident, and problem management for patch-related activities.
Skills and Qualification (Functional and Technical Skills)
Must have
- 7+ years in patch management, vulnerability remediation, and compliance
- Technical Skills:
- Strong knowledge of MacOS Operating Systems along with troubleshooting skills.
- Advanced knowledge of enterprise tools (JAMF) and BigFix architecture, deployment, and reporting to manage Mac fleet.
- Proficiency in using security and vulnerability management tools (Qualys).
- Proficiency in scripting languages like Apple script, Python, and Bash as needed to support Mac fleet.
- In-depth understanding of patching best practices, compliance, and IT security standards.
- Strong In-depth knowledge over JAMF to prepare and deploy OS and third-party software up and packages.
- Excellent troubleshooting and analytical skills.
- Strong communication and documentation abilities.
- Identify, understand and collaborate with OEM/Vendors to resolve patch related issues
- Familiarity with ITIL frameworks and best practices.
- Good to have
- Technical Skills:
- BigFix Baseline for MacOS and third-party patch deployments over MacOS workstations.
- Understanding of BigFix architecture, deployment, and reporting to manage Mac fleet.
Soft Skills:
- Excellent written and verbal communication skills, including the ability to communicate complex technical concepts to non-technical stakeholders.
- Strong analytical and problem-solving skills, with a methodical approach to troubleshooting.
- Ability to work independently and as part of a team in a fast-paced environment.
- Self-motivated, with a "can-do" attitude and comfort working with ambiguity.
- Strong customer service skills and a customer-focused mindset.
Preferred Qualifications:
- Certification (Jamf certified Admin) is a must.
- Experience working in the banking or financial services industry is a plus.
- Knowledge of network topology and security principles.
- Knowledge of collaboration tools like Jira, or Confluence.
Relationships & Collaboration
- Ensure great Partnership with IT counterparts (India as well as US associates).
- Be available for team connects if any.
- Flexible to adjust work scheduled including evening, weekend; as per Org need.
- Collaborate with Business wherever necessary.
