The Senior Systems Engineer, Patch Management is responsible for the strategy, administration, automation, and continuous improvement of enterprise patch and vulnerability management processes across Windows, Linux, virtual, cloud, and end-user computing platforms. This role ensures systems remain secure, compliant, and operationally stable while partnering with infrastructure, security, application, and business teams to reduce risk and maintain service reliability.
The ideal candidate combines strong technical expertise with operational leadership, driving patch compliance, vulnerability remediation, automation, reporting, and process improvements across a large-scale enterprise environment.
Key Responsibilities
Patch Management & Vulnerability Remediation
- Lead enterprise patch management operations across Windows Server, Linux, virtual infrastructure, cloud platforms, and endpoint devices.
- Develop and maintain patch deployment strategies, schedules, maintenance windows, and compliance standards.
- Coordinate remediation efforts for critical, high, and medium vulnerabilities identified through vulnerability management platforms.
- Manage exception and risk acceptance processes in partnership with Information Security and application owners.
Platform Administration
- Administer enterprise patching technologies including Microsoft Configuration Manager (SCCM/MECM), Intune, Red Hat Satellite, Ansible.
- Support operating system lifecycle management, including upgrades, patching, and end-of-support remediation activities.
- Ensure successful deployment and validation of security updates across production and non-production environments.
Automation & Process Improvement
- Design and implement automation solutions to improve patching efficiency, reporting, and compliance tracking.
- Continuously improve deployment processes, monitoring capabilities, and operational standards.
- Identify opportunities to reduce manual effort and increase deployment reliability.
Compliance & Reporting
- Maintain patch compliance metrics and service-level objectives.
- Create executive and operational reporting for vulnerability remediation, compliance status, aging vulnerabilities, and risk exposure.
- Ensure adherence to regulatory, security, and organizational compliance requirements.
Cross-Functional Collaboration
- Partner with Infrastructure, Security, Cloud, Application Support, and Engineering teams to coordinate patching activities.
- Provide technical leadership during major vulnerability response events and emergency patching situations.
- Participate in change management reviews, maintenance planning, and production readiness assessments.
- Mentor junior engineers and contribute to technical skill development within the team.
Use your skills to make an impact
Required Qualifications
- 5+ years of experience in enterprise patch management, systems engineering, infrastructure operations, or vulnerability remediation.
- Strong experience with Windows Server and Linux administration in large-scale enterprise environments.
- Hands-on experience with enterprise patching tools such as MECM/SCCM, Intune, Red Hat Satellite, Ansible, or equivalent platforms.
- Experience managing vulnerability remediation activities using tools such as Qualys, Rapid7, or similar vulnerability management solutions.
- Experience with scripting and automation using PowerShell, Python, Ansible, or similar technologies.
Preferred Qualifications
- Experience leading enterprise patch compliance or vulnerability management programs.
- Experience supporting cloud platforms such as Azure, AWS, or Google Cloud.
- Knowledge of security frameworks and standards including NIST, CIS Benchmarks, and vulnerability management best practices.
- Experience creating executive dashboards, compliance reporting, and operational metrics.
- Relevant certifications such as Security+, CISSP, RHCSA/RHCE, Azure Administrator, Microsoft Certified, or similar industry certifications.
Additional Information
Work at Home Requirements: To ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. In certain roles, the minimum recommended internet speed required by Humana may not be sufficient for business needs. Humana reserves the right to require associates to upgrade their internet service if necessary. Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information.Travel: While this is a remote position, occasional travel to Humana's offices for training or meetings may be required.
Scheduled Weekly Hours
40
Pay Range
The compensation range below reflects a good faith estimate of starting base pay for full time (40 hours per week) employment at the time of posting. The pay range may be higher or lower based on geographic location and individual pay will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc.
$97,900 - $133,500 per year
This job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance.
Description of Benefits
Humana, Inc. and its affiliated subsidiaries (collectively, “Humana”) offers competitive benefits that support whole-person well-being. Associate benefits are designed to encourage personal wellness and smart healthcare decisions for you and your family while also knowing your life extends outside of work. Among our benefits, Humana provides medical, dental and vision benefits, 401(k) retirement savings plan, time off (including paid time off, company and personal holidays, paid parental and caregiver leave), short-term and long-term disability, life insurance and many other opportunities.
