SQL Server Security & Vulnerability Management

Key Responsibilities

SQL Server Security & Vulnerability Management

• Perform CVE impact assessments for Microsoft SQL Server environments.
• Review Microsoft Security Advisories, SQL Server Cumulative Updates (CU), General Distribution Releases (GDR), and security bulletins.
• Assess security vulnerabilities and determine operational impact.
• Develop remediation plans and patch deployment strategies.
• Track vulnerability remediation and security compliance status.

SQL Server Patch Management

• Plan, schedule, and coordinate SQL Server patching activities across SIT, UAT, DR, and Production environments.
• Deploy SQL Server Cumulative Updates (CU), Service Packs, GDRs, and security patches.
• Perform pre-patch and post-patch health checks and validations.
• Develop rollback and recovery procedures for patch deployments.
• Ensure minimal downtime and adherence to maintenance windows.

BigFix Fixlet Development & Testing

• Develop and maintain BigFix Fixlets for SQL Server releases and security patches.
• Perform Fixlet testing and validation in SIT environments.
• Troubleshoot and resolve Fixlet deployment issues.
• Promote validated Fixlets to UAT and Production environments in accordance with change management procedures.

SQL Server Database Administration

• Install, configure, administer, and maintain SQL Server environments.
• Manage SQL Server Always On Availability Groups, Failover Cluster Instances (FCI), Replication, and Log Shipping.
• Monitor database performance, availability, and capacity.
• Perform backup, recovery, and disaster recovery testing.
• Support database refresh, migration, upgrade, and consolidation activities.
• Investigate and resolve database incidents and performance bottlenecks.

Reporting & Compliance

• Prepare SLA, performance, and availability reports.
• Generate patch compliance and vulnerability remediation reports.
• Maintain security, audit, and operational documentation.
• Support compliance and audit requirements.

Change & Release Management

• Participate in Change Advisory Board (CAB) reviews and implementation planning.
• Coordinate with Infrastructure, Security, Application, and Platform teams during maintenance activities.
• Ensure all patch deployments comply with organizational change management processes.
• Develop and maintain operational runbooks and standard operating procedures (SOPs).

Required Qualifications

• Bachelor's Degree in Computer Science, Information Technology, or a related field.
• 7+ years of experience as a Microsoft SQL Server Database Administrator.
• Strong hands-on experience with:
• Microsoft SQL Server 2016/2019/2022
• SQL Server Always On Availability Groups
• Failover Cluster Instances (FCI)
• SQL Server Replication
• SQL Server Reporting Services (SSRS)
• SQL Server Management Studio (SSMS)
• Experience applying SQL Server Cumulative Updates (CU), GDRs, and security patches.
• Knowledge of SQL Server security hardening and vulnerability management.
• Experience with BigFix administration and Fixlet deployment.
• Familiarity with ITIL Change, Incident, and Problem Management processes.
• Strong troubleshooting, root cause analysis, and performance tuning skills.

Preferred Skills

• Knowledge of Windows Server Administration and Failover Clustering.
• PowerShell scripting and automation.
• Experience supporting mission-critical and high-availability database environments.