Infrastructure Engineer II Workstation Patch Engineer

FC Global Services India LLP (First Citizens India), a part of First Citizens BancShares, Inc., a top 20 U.S. financial institution, is a global capability center (GCC) based in Bengaluru. Our India-based teams benefit from the company’s over 125-year legacy of strength and stability. First Citizens India is responsible for delivering value and managing risks for our lines of business. We are particularly proud of our strong, relationship-driven culture and our long-term approach, which are deeply ingrained in our talented workforce. This is evident across all key areas of our operations, including Technology, Enterprise Operations, Finance, Cybersecurity, Risk Management, and Credit Administration. We are seeking talented individuals to join us in our mission of providing solutions fit for our clients’ greatest ambitions.

Job Description:

Value Proposition:

As a Patch Engineer, this role is integral to leading enterprise-wide patch management, vulnerability remediation, and compliance initiatives. The position leverages advanced expertise in Microsoft Endpoint Configuration Manager (MECM), BigFix, and vulnerability scanning tools like Qualys to secure enterprise systems. The patch engineer will play a technical role along with mentoring teams for technical issues and help automate patching processes for improved efficiency and robust compliance.

Job Details

Position Title:  Infrastructure Engineer II - Workstation Patch Engineer

Career Level:  P2

Job Category: Senior Associate

Role Type: Hybrid

Job Location: Bangalore

About the Team:

First Citizens Bank is one of the top financial services providers, recognized and awarded for our customer satisfaction, sustainable profitability, and overall stability and security. Our associates make First Citizens Bank a great place for our clients to do business. Those who grow, achieve and succeed with First Citizens Bank are those who share our core values of integrity, service excellence and stability.

The patch management team is a cross-functional group focused on maintaining, optimizing, and securing enterprise endpoints. The team collaborates with IT security, infrastructure, and operations teams, working under critical deadlines to ensure uptime and compliance. Members contribute to a culture of continuous improvement, knowledge sharing, and operational excellence

Impact:

This Patch Engineer position is essential for enforcing security standards, ensuring compliance, and protecting the organization from threats. The role is pivotal in setting up automation and best practices in patching, participating in vulnerability remediation, and providing direction and mentorship to junior associates

Key Deliverables:

• Strategy Development: Creating and implementing comprehensive patch management strategies and policies for Windows OS endpoint devices for a large enterprise setup
• Patch Evaluation: Assessing vulnerabilities, determining patch criticality and impact, and ensuring compatibility with existing systems and applications.
• Testing: Designing and executing detailed test cases for patches in controlled environments to ensure functionality, stability, and compatibility.
• Deployment: Planning and executing the rollout of patches across the Windows 10 & 11 fleet and monitoring the process for successful completion.
• Vulnerability Management: Identifying and deploying critical security patches in a timely manner to mitigate vulnerabilities and ensure compliance.
• Troubleshooting: Resolving issues with failed patch installations and other problems that arise during the patching process.
• Automation: Developing custom scripts (as needed) and leveraging automation tools to streamline patch deployment, vulnerability remediation, and compliance tracking.
• Monitoring & Reporting: Tracking patch compliance metrics and producing regular reports on the effectiveness and status of the patching program.
• Collaboration: Working closely with various internal teams and third-party software application vendors to align with enterprise standards and address security threats.
• Documentation: Creating and maintaining documentation for patching procedures, troubleshooting steps, and user support knowledge bases.
• Generate metrics and dashboards to ensure endpoints meet organizational security and regulatory frameworks
• Process/Standards: Adhere strictly to ITIL change, incident, and problem management for patch-related activities
• Plan and lead rapid assessments and accelerated rollouts in response to critical and zero-day threats.
• Establish security governance, maintain audit readiness, and provide executive-level dashboards regarding patch compliance and risk reduction.
• Shift Support: 5:30 PM – 2:30 AM (IST)

Skills and Qualification:

Technical Skills:

• 7+ years of deep exposure in endpoint /workstation patch management, vulnerability remediation, and compliance using various tools (BigFix, Qualys, PowerShell scripting).
• Strong knowledge of Windows 10 & Windows 11 Operating Systems along with patch deployment and troubleshooting skills – Able to understand issues from log files.
• Advanced knowledge of BigFix architecture, deployment, and reporting.
• Strong knowledge over BigFix Baseline for patch deployments of workstation patches.
• Understanding of utilizing BigFix environment for approving, declining and managing patches
• Strong understanding of third-party software updates (including Java)
• Strong proficiency in PowerShell for automation and system management; Should be able to create, modify, update complex scripts to build solutions.
• Excellent troubleshooting and problem-solving skills to address complex technical issues.
• Understanding and exposure to vulnerability management tools (Qualys).
• In-depth understanding of patching best practices, compliance, and IT security standards.
• Identify, understand and collaborate with OEM/Vendors to resolve patch related issues
• Familiarity with ITIL frameworks and best practices

Good to have

Technical Skills:

• Understanding of software package creation and deployments.
• Understanding of patch deployments via WSUS , MECM along with MECM administration
• Patch Management on MacOS platform

Soft Skills:

• Excellent written and verbal communication along with strong documentation skills, including the ability to communicate complex technical concepts to non-technical stakeholders.
• Ability to work independently and as part of a team in a fast-paced environment.
• Self-motivated, with a "can-do" attitude and comfort working with ambiguity.
• Strong customer service skills and a customer-focused mindset.

Preferred Qualifications:

• Experience working in the banking or financial services industry is a plus.
• Familiarity with Agile and Waterfall project management methodologies.
• Knowledge of network topology and security principles.
• Experience with enterprise applications specific to the banking industry.
• Knowledge of collaboration tools like Jira, or Confluence.

Relationships & Collaboration

• Ensure great Partnership with IT counterparts (India as well as US associates).
• Be available for team connects if any.
• Flexible to adjust work scheduled including evening, weekend, as per Org need.
• Collaborate with Business wherever necessary.

Accessibility Needs

We are committed to providing an inclusive and accessible hiring process. If you require accommodations at any stage (e.g. application, interviews, onboarding) please let us know, and we will work with you to ensure a seamless experience.

Equal Employment Opportunity

FC Global Services India LLP (First Citizens India) is an Equal Employment Opportunity Employer. We are committed to fostering an inclusive and accessible environment and prohibit all forms of discrimination on the basis of gender, religion, caste, disability, sexual orientation, economic status or any other characteristics protected by the law. We strive to foster a safe and respectful environment in which all individuals are treated with respect and dignity. Our EEO policy ensures fairness throughout the employee life cycle.