The Systems Engineer - Patch Management is responsible for the execution, monitoring, troubleshooting, and continuous improvement of enterprise patching and vulnerability remediation activities. This role helps ensure Windows and Linux servers and workstations remain secure, compliant, and current with required operating system and security updates.
The engineer works closely with infrastructure, application, security, vulnerability management, and change management teams to resolve patching issues, remediate vulnerabilities, improve compliance, and increase automation across the patching lifecycle.
Key Responsibilities- Execute scheduled patching for Windows and Linux servers and workstations across development, test, and production environments.
- Deploy operating system and security updates using Microsoft Configuration Manager (MECM/SCCM), Ansible, PowerShell, Bash, and related automation tools.
- Monitor patch deployments and validate successful installation following scheduled maintenance windows.
- Maintain patching groups, deployment schedules, maintenance windows, and device targeting.
- Support accelerated patching and remediation of critical and internet-facing vulnerabilities requiring shortened remediation timelines.
- Track patch compliance and remediation progress against established SLAs, security requirements, and compliance targets.
- Identify and remediate systems that are:
- Non-compliant
- Missing required patches
- Offline or unreachable
- Experiencing recurring patch failures
- Pending required reboots
- Outside approved maintenance windows
- Troubleshoot patching and deployment failures, including client health, connectivity, disk space, installation, reboot, configuration, and dependency issues.
- Perform manual remediation when automated patching is unsuccessful.
- Validate system health and patch compliance following remediation activities.
- Provide patching status, exception, failure, and remediation reporting.
- Identify recurring patch failures, operational gaps, and opportunities for automation.
- Develop and support automation using PowerShell, Ansible, Bash, or similar technologies.
- Reduce manual patching and remediation activities through standardized and repeatable automation.
- Improve patch deployment success rates and reduce recurring failure conditions.
- Maintain patching documentation, operational runbooks, troubleshooting procedures, and knowledge articles.
- Escalate complex technical issues to senior engineering or platform teams when appropriate.
Required Qualifications- 3+ years of experience in systems administration, infrastructure operations, patch management, or a related technical role.
- Hands-on experience supporting Windows Server and/or Linux environments.
- Experience with enterprise patch management and automation technologies, including:
- Microsoft MECM/SCCM
- Ansible
- PowerShell and/or Bash
- Experience troubleshooting operating system patching, deployment, and remediation failures.
- Understanding of vulnerability management, security remediation, CVEs, and patch compliance concepts.
- Working knowledge of Active Directory, DNS, networking, server infrastructure, and virtualization technologies.
- Experience working within formal change management and production support processes.
- Ability to analyze patch compliance data, identify remediation priorities, and drive issues to resolution.
- Ability to work independently on Level 2 incidents and remediation activities while appropriately escalating complex issues.
Preferred Qualifications- Experience with vulnerability management platforms such as Qualys.
- Experience with ServiceNow for incidents, changes, requests, and remediation tracking.
- Experience developing patching or infrastructure automation.
- Experience supporting large-scale enterprise server and workstation environments.
- Familiarity with vulnerability remediation SLAs and accelerated patching processes for critical or externally exposed systems.
Use your skills to make an impact This role is not eligible for work visa sponsorship.
Work at Home Requirements: To ensure Home or Hybrid Home/Office employees' ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. In certain roles, the minimum recommended internet speed required by Humana may not be sufficient for business needs. Humana reserves the right to require associates to upgrade their internet service if necessary. Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information.
Travel: While this is a remote position, occasional travel to Humana's offices for training or meetings may be required.
Scheduled Weekly Hours40
Pay RangeThe compensation range below reflects a good faith estimate of starting base pay for full time (40 hours per week) employment at the time of posting. The pay range may be higher or lower based on geographic location and individual pay will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc.
$80,900 - $110,300 per year
This job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance.
Description of BenefitsHumana, Inc. and its affiliated subsidiaries (collectively, "Humana") offers competitive benefits that support whole-person well-being. Associate benefits are designed to encourage personal wellness and smart healthcare decisions for you and your family while also knowing your life extends outside of work. Among our benefits, Humana provides medical, dental and vision benefits, 401(k) retirement savings plan, time off (including paid time off, company and personal holidays, paid parental and caregiver leave), short-term and long-term disability, life insurance and many other opportunities.
