ESEM Patch Management Migration & Content Distribution Architect

Role Description

Iron Bow Technologies is looking for an ESEM Patch Management Migration Architect to own the patch-management migration strategy and content distribution architecture for replacing BigFix with NinjaOne. The Architect designs:

• Patch policy mapping
• Patch/content distribution
• Pre-staging
• Maintenance-window logic
• Custom detection and installation logic
• Pilot waves
• Cutover criteria
• Rollback criteria
• Patch reporting parity

Scope boundary: This role designs, configures, validates, and supports the patch-management architecture and migration. It does not own VA production patch approval, deployment authorization, reboot coordination, application-owner outage coordination, exception approval, routine endpoint patch operations, or enterprise patch compliance risk acceptance unless separately directed.

How you'll make an impact:

• Assess current BigFix patch policies, baselines, targeting, maintenance-window logic, distribution topology, custom content, and reporting needs.
• Develop the BigFix-to-NinjaOne migration and coexistence plan, including parallel-run approach, cutover sequencing, rollback gates, parity metrics, and acceptance criteria.
• Design content distribution/cache/DDP-like architecture for datacenters, cloud, remote sites, constrained networks, payloads over 5GB, and dedicated distribution endpoints.
• Configure and validate patch policies, patch groups, pre-staging, scheduling, maintenance windows, policy exceptions, and custom detection/installation logic.
• Define and execute patch test strategy across lab, pre-production, pilot, and production waves; validate patch distribution, reporting, and endpoint impact before cutover.
• Document patch architecture, patch migration SOPs, operational runbooks, cutover reports, training inputs, and known gaps/mitigations for VA and project leadership.

Qualifications

• 7+ years of patch management, endpoint management, systems engineering, software distribution, or endpoint migration experience.
• Hands-on experience with enterprise patching tools such as BigFix, Tanium, MECM/SCCM, Intune, Jamf, NinjaOne, or similar platforms.
• Strong knowledge of patch policy design, staged rollouts, content distribution, caching/distribution points, maintenance windows, rollback, and exception handling.
• Experience with Windows Server/Desktop and Linux patching; familiarity with macOS and third-party application patching.
• Scripting and packaging experience using PowerShell, Bash, silent installers, custom detection logic, logs, and deployment troubleshooting.
• Ability to work in ServiceNow/change-control environments and complete VA onboarding, background investigation, Rules of Behavior, and required security/privacy training.

Requirements

• Active VA Public Trust / VA PIV and prior VA, federal civilian, healthcare, or regulated-enterprise experience.
• BigFix migration, BigFix coexistence, or enterprise replacement experience with 50,000+ endpoints.
• Hands-on NinjaOne patch management, software deployment, automation, or endpoint policy experience.
• Familiarity with legacy server estates, Solaris/RHEL/Windows Server variations, DISA STIG/CIS baselines, CDM/FISMA reporting, and FedRAMP SaaS environments.

Benefits

• You will be part of a company that is growing quickly and values your voice, ideas, and experience.
• You will be a key contributor to Iron Bow’s transformational shift in how we deliver value to both customers and employees.
• You will have the pleasure of working with passionate professionals in a culture that fosters a workplace where everyone feels respected, supported and empowered to succeed.