Windows SRE Patch Management Specialist

Synechron is seeking a Windows Administration Specialist to support the reliability, security, and scalability of Windows-based platforms across on-premises and AWS environments.

The role will own Windows administration, patch management, automation, observability, and operational improvement. Success will be measured through improved patch compliance, reduced operational risk, reliable service performance, and increased automation.

Software Requirements

Required

• Windows Server 2016, 2019, and 2022 administration
• PowerShell scripting and automation
• Enterprise patch management using Ivanti or an equivalent platform
• AWS services, including EC2, AMIs, Systems Manager, and patch baselines
• Monitoring and logging tools such as Datadog, Dynatrace, Splunk, or Sumo Logic
• ITSM tools such as ServiceNow or equivalent
• CI/CD tools such as Jenkins, Buildkite, or equivalent

Preferred

• WSUS, SCCM/MECM, or comparable patching platforms
• Terraform, CloudFormation, DSC, or Ansible
• Git-based source control and infrastructure-as-code workflows
• Linux administration fundamentals

Overall Responsibilities

• Design, maintain, and secure highly available Windows Server environments.
• Own the full Windows patch management lifecycle, including assessment, scheduling, deployment, validation, reporting, and remediation.
• Operate and optimize Ivanti or equivalent patching solutions.
• Automate provisioning, configuration, patching, compliance checks, and operational tasks using PowerShell and IaC.
• Monitor Windows systems, investigate incidents, and resolve performance, stability, and security issues.
• Improve Windows hardening, vulnerability remediation, and patch compliance.
• Support Windows workloads, build agents, and services within CI/CD pipelines.
• Partner with SRE, platform, application, and security teams from design through production.
• Document standards, procedures, recovery steps, and operational decisions.
• Contribute to blameless postmortems and continuous improvement initiatives.

Expected outcomes:

• Consistent and measurable patch compliance
• Reduced unresolved vulnerabilities and configuration drift
• Improved system availability and incident response
• Increased automation and reduced manual operational effort
• Clear, current, and reusable technical documentation

Technical Skills (By Category)

Programming and Scripting

Essential:

• PowerShell scripting for administration, reporting, and automation
• Basic scripting practices including error handling, logging, testing, and version control

Preferred:

• Python or another automation language

Databases and Data Management

Essential:

• Ability to review operational data, patch reports, logs, and compliance metrics

Preferred:

• Basic SQL knowledge
• Experience managing configuration or asset data

Cloud Technologies

Essential:

• AWS EC2, AMIs, Systems Manager, and patch baselines
• Windows workload management in cloud environments

Preferred:

• CloudFormation or Terraform
• Experience designing resilient and cost-aware cloud infrastructure

Frameworks and Libraries

Essential:

• Windows Server administration and Active Directory fundamentals
• PowerShell modules and Desired State Configuration concepts

Preferred:

• Ansible or other configuration management frameworks

Development Tools and Methodologies

Essential:

• CI/CD integration for Windows applications and build agents
• Git-based workflows
• Infrastructure-as-code and configuration management principles
• Incident, change, and problem management practices

Preferred:

• Experience with SRE practices, service-level objectives, and post-incident reviews

Security Protocols and Compliance

Essential:

• Windows security hardening
• Vulnerability remediation and patch compliance
• Access control, encryption, endpoint protection, and audit requirements
• Maintenance window planning and risk-based change management

Preferred:

• Familiarity with recognized security and compliance frameworks

Experience Requirements

• Typically 35 years of experience in Windows Server administration, site reliability, infrastructure engineering, or a related role.
• Demonstrated experience managing Windows patching at enterprise scale.
• Practical experience with Ivanti or comparable patch management platforms.
• Experience supporting production systems across on-premises and AWS environments.
• Experience automating operational tasks with PowerShell.
• Financial services or other regulated-industry experience is preferred.
• Equivalent experience gained through technical training, certifications, internships, or progressively responsible infrastructure roles may be considered.

Day-to-Day Activities

• Review system health, alerts, patch status, vulnerabilities, and operational dashboards.
• Plan and coordinate maintenance windows and patch deployments.
• Test, deploy, validate, and report on Windows updates.
• Investigate incidents, performance issues, failed deployments, and compliance gaps.
• Develop PowerShell scripts and automation for recurring tasks.
• Manage AWS-based Windows instances, images, and Systems Manager configurations.
• Participate in stand-ups, incident reviews, change reviews, and planning sessions.
• Collaborate with SREs, engineers, application teams, security teams, and service owners.
• Contribute to CI/CD improvements, documentation, standards, and operational runbooks.
• Make decisions within approved change, security, and availability controls, escalating material risks when required.

Qualifications

• Degree, diploma, or equivalent practical experience in Information Technology, Computer Science, Engineering, or a related field.
• Relevant certifications are preferred, such as Microsoft Windows Server, AWS, ITIL, or security certifications.
• Completion of role-relevant training in Windows administration, PowerShell, cloud operations, security, and patch management.
• Ongoing learning is expected through technical training, knowledge sharing, certifications, and hands-on experimentation.
• Ability to participate in scheduled maintenance activities or incident response, where required by the operating model.

Professional Competencies

• Critical thinking: Analyze technical evidence, identify root causes, and select proportionate solutions.
• Problem-solving: Resolve incidents systematically while reducing the likelihood of recurrence.
• Leadership and teamwork: Share expertise, mentor peers, and work effectively across disciplines.
• Communication: Explain technical risks, plans, and outcomes clearly to technical and non-technical stakeholders.
• Adaptability: Respond constructively to changing priorities, technologies, and operating conditions.
• Innovation: Identify opportunities to automate, simplify, and improve reliability.
• Time management: Prioritize work according to service impact, security risk, compliance deadlines, and operational capacity.
• Operational responsibility: Support sustainable practices by reducing manual effort, unnecessary infrastructure use, and repeat incidents.