PAVC Engineer

Job Title: PAVC Engineer (Patching, Antivirus and Vulnerability Compliance)Job Summary:

The PAVC engineer owns and operates the Patch, Antivirus, and Vulnerability Compliance (PAVC) system across various environments. This role ensures timely, safe, automated deployment of Windows security patches, Defender platform/signatures, .NET updates, and vulnerability remediation actions at fleet scale. The engineer maintains PAVC pipelines, drives compliance initiatives across multiple global deployment environments, and partners with multiple engineering and security teams to maintain high compliance rate and nearzero monthly vulnerabilities.

Duties/Responsibilities:

• Manage monthly Windows security patch rollout (official + prerelease), Defender updates, .NET Core updates, and related Substrate security/compliance  components
• Maintain compliance SLA across all Substrate deployment environments
• Follow Safe Deployment Practices (SDP) across all rings and environments
• Build, validate, and publish patching components/packages
• Maintain dashboards, monitoring, and compliance reporting
• Work with multiple partner teams across organizations to meet compliance goals through active management of the patching installation/investigations
• Coordinate PAVC rollouts with security & compliance stakeholders to meet regulatory requirements
• Engage with teams for exceptions, blockers, environmentspecific patching rules, and manual interventions.
• Investigate and remediate deployment “stragglers”: Stuck deployments due to capacity constraints or deployment failures, escalating to respective teams and reporting on the statuses

Required Skills/Abilities:

• Expertise in Windows servicing, cumulative update behavior, MSU installations, hot-patching process (Server 2025), and OS baseline requirements (STIGs)
• Handson experience with PowerShell, .NET tooling, automation scripts, KQL and Azure DevOps build pipelines
• Familiarity with vulnerability scanning systems (Qualys/AzSecPack) and mapping CVEs to patch flows
• Ability to diagnose complex multiteam issues (network failures, machine repair states, capacity limits, WinPE issues)
• Strong debugging and triage capabilities across tens of thousands of servers with disparate configurations
• Ability to manage largescale patch compliance programs under strict regulatory and audit requirements
• Excellent communication skills to coordinate with crossfunctional partners

Experience: 5+

Competency: P2/P3/P4

Location: Hyderabad/Bengaluru/Pune/Mumbai/Chennai/Coimbatore/Noida

Work Mode: Hybrid

Client Interview: Yes

Shifts: Yes

Night shift - 9 PM - 6 AM

Evening shift (Overlap Shift) is 6 PM to 3 AM

Monthly Rotational.