Enterprise Patch Management Specialist

1. Introduction Los Angeles World Airports (LAWA) is seeking proposals from qualified vendors to provide staff augmentation resources for an Enterprise Patch Management Specialist role. The selected resource will support LAWA's cybersecurity and infrastructure operations by managing enterprise patching, software updates, vulnerability remediation, and compliance activities across Windows, Linux, VMware, and third‑party application environments. 2. Project Overview The Enterprise Patch Management Specialist will be responsible for planning, testing, deploying, validating, and reporting on security patches and updates across LAWA's enterprise infrastructure. The role requires extensive experience with Microsoft Intune, Microsoft Endpoint Configuration Manager (MECM/SCCM), Windows Server, Linux Server, VMware environments, and third‑party application patching. The resource will work closely with cybersecurity, server, network, application, and operations teams to maintain secure, compliant, and highly available systems. 3. Scope of Work Staff Augmentation: Provide qualified Patch Management Specialist with relevant qualifications and experience, with on‑site presence required. Key Responsibilities Manage and maintain the enterprise patch management lifecycle across Windows, Linux, VMware, and third‑party application environments. Utilize Microsoft Intune and Microsoft Endpoint Configuration Manager (MECM/SCCM) to deploy, manage, monitor, and report on endpoint and server patch compliance. Develop and maintain patch management policies, procedures, standards, and operational documentation. Perform testing, validation, deployment, and rollback planning for operating system and application updates. Administer Windows Server and Windows workstation patching activities. Administer Linux patching activities, including Red Hat Enterprise Linux (RHEL), Ubuntu, Rocky Linux, and CentOS environments using Ansible. Manage VMware ESXi host, vCenter, and VMware infrastructure patching and upgrades. Deploy and manage patches for third‑party applications, including Adobe products, Google Chrome, Mozilla Firefox, Java, Citrix, Zoom, Oracle products, and other enterprise software. Utilize patch catalogs and software packaging solutions within MECM and Intune to automate third‑party application deployment and patching. Coordinate monthly and emergency patch deployment cycles. Identify, prioritize, and remediate vulnerabilities discovered through Qualys, Rapid7, Microsoft Defender Vulnerability Management, or similar vulnerability management platforms. Analyze vulnerability scan results and develop remediation plans based on business risk and system criticality. Maintain enterprise patch compliance levels in accordance with cybersecurity and regulatory requirements. Troubleshoot failed deployments and remediation issues across endpoints, servers, and virtual infrastructure. Create executive and operational dashboards and reports demonstrating patch compliance and remediation performance. Support audit readiness and provide evidence for internal and external assessments. Collaborate with cybersecurity teams to support vulnerability management programs and reduce organizational risk. Automate patch management tasks using PowerShell, Bash, Python, Ansible, or similar scripting tools. Support emergency mitigation efforts for critical vulnerabilities and zero‑day threats. Participate in change management processes and maintenance window coordination. Maintain accurate patching records, exceptions, and remediation tracking documentation. 4. Qualifications Proven experience in enterprise patch management and systems administration. Strong experience patching and supporting Microsoft Windows Server and Windows desktop operating systems. Strong experience patching Linux operating systems, including RHEL, Ubuntu, Rocky Linux, and CentOS. Experience administering VMware ESXi and VMware vCenter environments. Extensive hands‑on experience with Microsoft Intune and Microsoft Endpoint Configuration Manager (MECM/SCCM). Experience managing and patching third‑party applications across enterprise environments. Experience with Windows Update for Business (WUfB) and Microsoft cloud‑based update management. Familiarity with Microsoft Defender for Endpoint and Defender Vulnerability Management. Experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, or similar tools. Knowledge of NIST Cybersecurity Framework (CSF), NIST SP 800‑53, CIS Benchmarks, and cybersecurity best practices. Understanding of change management and operational processes. Experience supporting audit and compliance activities. Strong troubleshooting, analytical, documentation, and communication skills. Ability to work effectively with both technical and non‑technical stakeholders. Preferred Certifications Microsoft Certified: Endpoint Administrator Associate (MD-102) Microsoft Certified: Windows Server Hybrid Administrator Associate Red Hat Certified Engineer (RHCE) CompTIA Security+ #J-18808-Ljbffr SATWIC