Lead Infrastructure Engineer - Server / BigFix Patch Engineer

Overview

Lead Infrastructure Engineer (Patch Management, BigFix / Server Patching) responsible for enterprise-wide patch management, vulnerability remediation and compliance, with technical ownership of the BigFix environment and mentoring of L2 teams.

What you'll do

• Maintain the core BigFix environment, including Root Servers, Relay hierarchies, Database Replication (DSA) and WebUI health.
• Design, implement, monitor, tune and troubleshoot the BigFix client and infrastructure, including relay affiliation, relay placement recommendations and Peer Nest.
• Patch and upgrade BigFix clients and server environment with the latest updates.
• Provide mentoring and support to other engineers on advanced scripting, use of APIs, automation and database services.
• Work with architects, integration engineers and developers to design and integrate solutions.
• Improve data quality, security and compliance.
• Build dashboards to report patch and vulnerability compliance using BigFix Insights for Vulnerability Remediation (IVR).
• Identify and manage solution dependencies with other systems and elements of the enterprise IT infrastructure.
• Assess software patches and create a recommended patch list with a logical explanation in terms of compliance.
• Develop and optimize pre- and post-patching processes to ensure implementation without outages.
• Score each patch based on risks and opportunity to prioritize, and identify which patches are more valuable to the organization.
• Act as the escalation point for patch execution, mentor the L2 team and resolve complex scenarios and technical issues.
• Ensure overall service levels for infrastructure uptime through patch management standards, firmware upgrades and vendor-based advisory.
• Develop automation scripts and programs to streamline manual patch operations and improve mean time to deliver and first-time-right metrics.
• Lead rapid assessments and accelerated rollouts in response to critical and zero-day threats.
• Oversee pre-deployment patch testing in pilot environments to ensure compatibility and prevent disruption to business operations.
• Establish security governance, maintain audit readiness and provide executive-level dashboards on patch compliance and risk reduction.
• Partner with cyber security operations, vulnerability management and infrastructure teams to map threat intelligence to asset criticality.

What you'll need

• 7+ years of deep exposure to Server OS platforms (Windows, RHEL) patch management, vulnerability remediation and compliance using tools such as BigFix, Qualys and PowerShell scripting.
• Expert-level knowledge of the BigFix framework and BigFix Relevance and ActionScript, with hands-on experience deploying software, policy and remediation actions.
• Proficiency in PowerShell and/or Python for task automation.
• Minimum of 7 years' experience administering BigFix or similar tools (Microsoft SCCM as subject matter expert).
• Working knowledge of deployment, configuration and building compliance dashboards with BigFix Insights for Vulnerability Remediation.
• Hands-on experience with deployment, configuration, customization and endpoint management in a large enterprise setting.
• Extensive experience implementing and using BigFix and SCCM native APIs and WMI query methods and schemas.
• Illustrate effective inventory methods, patch management, hardware asset discovery, software deployment and configuration settings management.
• Expertise in writing and applying fixlets and tasks, and in analysis.
• Develop custom Fixlets, Tasks and Baselines for rapid OS and third-party software patching.
• Proven track record of developing and deploying provisioning methods, scripts and applications through BigFix.
• Use of key technologies: Active Directory, LDAP, GPOs, PowerShell and SSH.
• SME of Microsoft SQL database, database definition, procedures and advanced queries.
• Act as an expert support resource for multiple server and desktop technology stack components.
• Assist and mentor system administrators and technicians to foster personal growth and accountability.
• Excellent written and verbal communication and strong documentation skills, including explaining complex technical concepts to non-technical stakeholders.
• Ability to work independently and as part of a team in a fast-paced environment, with a self-motivated, can-do attitude and comfort with ambiguity.
• Strong customer service skills and a customer-focused mindset.

Nice to have

• Experience building custom Web Reports with HTML and Relevance.
• Experience with patching Linux servers.
• Understanding of software package creation and deployments.
• Understanding of patch deployments via MECM and MECM administration.
• Experience in the banking or financial services industry.
• Familiarity with Agile and Waterfall project management methodologies.
• Knowledge of network topology and security principles.
• Experience with enterprise applications specific to the banking industry.
• Knowledge of collaboration tools such as Jira or Confluence.

Details

• Location: Bangalore, India. Work mode: Hybrid.
• Shift support: 5:30 PM to 2:30 AM (IST).
• Flexible to adjust work schedules, including evenings and weekends, as per organizational need.
• Be available for team connects if needed; partner with IT counterparts in India and the US.