Embrace what’s next.
Create new possibilities.

Job Purpose and Impact

The Senior Professional, Client Devices – Vulnerability & Patching Engineer leads and reviews the maintenance, security, and compliance of enterprise client devices with a primary focus on patching execution and vulnerability remediation. With minimal supervision, this role analyzes vulnerability and compliance trends, drives remediation of security gaps, and implements complex patching and security measures to protect client devices from threats. The role provides operational oversight and technical leadership to ensure client devices remain secure, compliant, and reliable while minimizing business risk and user downtime.

Key Accountabilities

SECURITY IMPLEMENTATION & VULNERABILITY MANAGEMENT:Leads and reviews implementation of complex security, patching, and vulnerability remediation measures to protect client devices from threats and maintain compliance with organizational policies and standards.
MAINTENANCE & UPDATES: Leads and reviews maintenance and updates on client devices, including patch deployment, remediation of identified vulnerabilities, installing updates, and software changes to ensure timely and consistent execution.
VULNERABILITY ANALYSIS & COMPLIANCE OVERSIGHT:Monitors vulnerability trends, compliance posture, and patching effectiveness across the client device environment; identifies gaps and drives execution to close open vulnerabilities and compliance issues.
OPERATIONAL LEADERSHIP:Provides operational leadership and oversight for client device patching and compliance activities, reviewing execution by operational teams and ensuring outcomes align with security and availability expectations.
TECHNICAL SUPPORT:Provides advanced technical support and troubleshooting for complex hardware, software, patching, and compliance-related issues to minimize downtime and accelerate remediation.
DEVICE CONFIGURATION & STANDARDS:Leads and reviews client device configuration standards to ensure devices are built and maintained in a manner that supports secure patching, compliance, and vulnerability management processes.
INVENTORY MANAGEMENT:Oversees awareness of client device inventory, tracking lifecycle and device status as it relates to patch eligibility, vulnerability exposure, and compliance.
DOCUMENTATION:Builds and maintains documentation for patching processes, vulnerability remediation procedures, and operational standards to support consistent and efficient execution.
COLLABORATION:Leads collaboration with security, infrastructure, and other technology teams to ensure client device patching and vulnerability management integrate effectively within the broader technology environment.
USER TRAINING & ASSISTANCE:Provides guidance and assistance to users and support teams related to device maintenance activities as needed to support secure and efficient operations.

Qualifications

MINIMUM & TYPICAL YEARS OF WORK EXPERIENCE:
Minimum requirement of 4 years of relevant work experience. Typically reflects 5 years or more of relevant experience.

Technical Functional Skills5+ years advanced knowledge of Windows OS architecture, troubleshooting, and performance optimization5+ years experience with MECM, Intune, SCORCH, and GPO managementStrong scripting skills (PowerShell preferred)SQL and PowerBI query and reporting skills preferred but not requiredVB / VB.NET scripting skills preferred but not requiredExperience with patching strategies, vulnerability remediation, and compliance enforcement