Systems Engineer III

Patch Engineer

First Citizens Bank is one of the top financial services providers, recognized and awarded for our customer satisfaction, sustainable profitability, and overall stability and security. Our associates make First Citizens Bank a great place for our clients to do business. Those who grow, achieve, and succeed with First Citizens Bank are those who share our core values of integrity, service excellence, and stability. The patch management team is a cross-functional operational group focused on maintaining, optimizing, and securing enterprise endpoints. The team collaborates with IT security, Infrastructure, and Operations teams, working under critical deadlines to ensure uptime and compliance. Members contribute to a culture of continuous improvement, knowledge sharing, and operational excellence.

As a Patch Engineer, this role is integral to leading enterprise-wide patch management, vulnerability remediation, and compliance initiatives. The position requires expertise in BigFix platform for patch management and exposure to vulnerability scanning tools like Qualys to secure enterprise systems. The engineer will play a technical member role along with mentoring teams for technical issues and help automate patching processes for improved efficiency and desired compliance levels.

Responsibilities & Qualifications

Key Deliverables (Duties and Responsibilities)

• Strategy Development: Creating and implementing comprehensive patch management strategies and policies for patch management on Windows OS endpoints
• Patch Evaluation: Assessing vulnerabilities, determining patch criticality and impact, and ensuring compatibility with existing systems and applications.
• Testing: Designing and executing detailed test cases for patches in controlled environments to ensure functionality, stability, and compatibility.
• Deployment: Planning and executing the rollout of patches across the Windows 10 & 11 fleet and monitoring the process for successful completion.
• Vulnerability Remediation: Deploying critical security patches in a timely manner to mitigate vulnerabilities and ensure compliance.
• Troubleshooting: Resolving issues with failed patch installations and other problems that arise during the patching process.
• Automation: Developing custom scripts (as needed) and leveraging automation tools to streamline patch deployment, vulnerability remediation, and compliance tracking.
• Monitoring & Reporting: Tracking patch compliance metrics and producing regular reports on the effectiveness and status of the patching program.
• Collaboration: Working closely with various internal teams and OEMs to align with enterprise standards and address security threats.
• Documentation: Creating and maintaining documentation for patching procedures, troubleshooting steps, and user support knowledge bases.

Skills Required

• 7+ years of deep exposure in workstation patch management, vulnerability remediation, and compliance using various tools (BigFix, Active Directory and PowerShell scripting)
• Strong knowledge of Windows 10 & Windows 11 Operating Systems along with patch deployment and troubleshooting skills
• Advanced knowledge of BigFix endpoint management (baseline) patching, troubleshooting, and compliance reporting
• Understanding of utilizing WSUS and BigFix environment for approving, declining, and managing patches
• Strong understanding of third-party software updates with third party patching tools like PMPC, Ivanti etc.
• Proficiency in PowerShell for automation and system management; Should be able to create, modify, update complex scripts to build solutions.
• Excellent troubleshooting and problem-solving skills to address complex technical issues

Good to have

• Understanding of software package creation and deployments
• Understanding and exposure to vulnerability management tools (Qualys)
• In-depth understanding of patching best practices, compliance, and IT security standards
• Identify, understand, and collaborate with OEM/Vendors to resolve patch related issues
• Experience working with Microsoft Endpoint Manager Configuration Manager (MEMCM) for device management and patching
• Familiarity with ITIL frameworks and best practices

Soft Skills:

• Excellent written and verbal communication along with strong documentation skills, including the ability to communicate complex technical concepts to non-technical stakeholders.
• Ability to work independently and as part of a team in a fast-paced environment.
• Self-motivated, with a "can-do" attitude and comfort working with ambiguity.
• Strong customer service skills and a customer-focused mindset.

Preferred Qualifications:

• Experience working in the banking or financial services industry is a plus.
• Knowledge of network topology and security principles.
• Knowledge of collaboration tools like Jira, or Confluence.

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at