Full Job Description
Patch Management Lead/Engineer
Role Overview
The IT Technical lead - Patching & Systems Management is responsible for ensuring the security, stability, and compliance of enterprise IT systems through effective patch management and system maintenance. This role requires a strong technical foundation combined with leadership capabilities to design and execute patching strategies across multiple operating systems and applications. The Technical Lead will drive automation, optimize processes, and collaborate with infrastructure, application, and security teams to reduce vulnerabilities and maintain operational continuity. Acting as a subject matter expert, this position will set standards, mentor team members, and play a key role in strengthening the organization's cybersecurity posture.
Key Responsibilities
• Lead enterprise-wide patch management strategy, planning, and execution across Windows, Linux, macOS environments and applications, ensuring compliance with security policies and guidelines.
• Collaborate with security, infrastructure, and application teams to ensure seamless patch deployment
• Coordinate monthly patch cycles including testing, deployment, and validation phases
• Manage emergency and out-of-band patching for critical security vulnerabilities
• Develop and maintain patch compliance reporting and metrics dashboards
• Implement automation for patching and vulnerability remediation workflows.
• Provide dashboards and executive reports on remediation progress and risk posture.
• Document patching procedures, runbooks and KB articles.
Required Technical Skills
• Extensive hands-on experience in planning, testing, and deploying patches across operating systems and applications in large-scale enterprise settings.
• Proven ability to manage end-to-end patching cycles, including pre-deployment validation, impact analysis, and rollback strategies.
• Deep understanding of CIS benchmarks and security hardening practices
• Experience with 1 or more patch management tools (such as Qualys, Tenable, Rapid7) across multiple environments and applications.
• Hands-on and deep knowledge of Microsoft platform technologies such as Windows 10/11, M365/O365, AD/Entra ID is a must
• Hands-on experience with SCCM, WSUS, or similar patching tools.
• Proficiency in scripting tools such as PowerShell, Python, Bash for automation.
• Good knowledge Linux, Unix operating systems are required and hands-on a huge plus.
• Broad understanding of common corporate applications and databases is required.
• Experience in patching CLOUD environments such as AWS, GCP a huge plus.
Soft Skills
• Strong communication and stakeholder management skills.
• Ability to lead cross-functional teams and influence without direct authority.
• Analytical mindset for risk-based decision-making.
For positions requiring access to technical data, Analog Devices, Inc. may have to obtain export licensing approval from the U.S. Department of Commerce - Bureau of Industry and Security and/or the U.S. Department of State - Directorate of Defense Trade Controls. As such, applicants for this position - except US Citizens, US Permanent Residents, and protected individuals as defined by 8 U.S.C. 1324b(a)(3) - may have to go through an export licensing review process.
Job Req Type: Experienced
Required Travel: Yes, 10% of the time
Shift Type: 1st Shift/Days
The expected wage range for a new hire into this position is $106,500 to $159,750.
• Actual wage offered may vary depending on work location, experience, education, training, external market data, internal pay equity, or other bona fide factors.
• This position qualifies for a discretionary performance-based bonus which is based on personal and company factors.
• This position includes medical, vision and dental coverage, 401k, paid vacation, holidays, and sick time, and other benefits.
