Patch Management Engineer

About the role

Zendata delivers cybersecurity services to clients across many industries and is hiring a Patch Management Engineer to deliver patching for multiple customer environments. You will work hands-on across different technology stacks and tools, follow each client's change process, own client-facing reporting and ensure clients stay protected without disrupting their operations.

Key responsibilities

• Execute scheduled and emergency patching for assigned clients across on-premises, cloud (AWS, Azure, GCP) and hybrid environments.
• Patch Windows and Linux servers and endpoints, and third-party applications; support patching of hypervisors, databases and network/security devices with guidance from senior engineers.
• Operate client patching tools such as MECM/SCCM, Intune, WSUS, Ivanti, ManageEngine, Automox, NinjaOne, Ansible, AWS SSM or Azure Update Manager.
• Review vulnerability scan results (Tenable, Qualys, Rapid7, Defender VM) and help prioritize remediation by severity and asset criticality.
• Prepare change requests, test patches in pilot groups and follow rollback plans when deployments fail.
• Troubleshoot failed installations, reboots and agent or connectivity issues.
• Track patch status and SLA compliance, and prepare data for monthly client reports.
• Assist in onboarding new clients, including asset discovery and agent deployment.
• Join emergency response for zero-day vulnerabilities alongside the SOC and senior team.
• Write and maintain runbooks and contribute small automation scripts.

Required profile

• Around 3 years of experience in systems administration, IT operations or patch management, with hands-on patching as a core duty.
• Practical experience patching Windows and Linux; exposure to virtualization and at least one public cloud.
• Hands-on use of at least one enterprise patching tool and one vulnerability scanner.
• Understanding of change management and working within maintenance windows.
• Clear written and spoken communication, able to coordinate with client IT teams.
• Willingness to work occasional off-hours maintenance windows.
• Preferred: experience in an MSP, MSSP or service-desk environment supporting multiple clients; certifications such as Microsoft Endpoint Administrator Associate, RHCSA, Qualys TruRisk Eliminate, ITIL or CompTIA CySA+; exposure to network/security device updates or database patching; Arabic and English fluency.