Windows Server Engineer - Vulnerability Management & Patch Management

Job Title: Windows Server Engineer

Work Location: TCS MUMBAI, MH

Skills Required: MSS - Vulnerability Management, Patch Management, Windows Servers

Experience: 6 8 years

Job Description:

Perform regular vulnerability scans of Windows servers (physical and virtual) and applications to identify security weaknesses.

Analyze scan results to prioritize vulnerabilities based on severity, risk, and potential business impact, and coordinate prompt remediation.

Manage the end-to-end patch management lifecycle including research, testing, approval, and deployment of updates for Windows operating systems and supported applications.

Maintain an accurate and up-to-date inventory of all Windows assets to ensure complete coverage for patching and vulnerability management.

Collaborate with cross-functional IT and security teams to plan and execute patch deployments, ensuring minimal disruption to business operations.

Troubleshoot and resolve issues encountered during or after patch deployment, including SCCM client or update installation failures.

Monitor and report on patch compliance, vulnerability trends, and remediation progress.

Continuously improve patching and vulnerability management processes through automation, documentation, and best practices.

Required Skills and Experience:

58 years of hands-on experience in Windows Server administration, patch management, and vulnerability remediation.

Proficiency with Windows Server operating systems (2012, 2016, 2019, and 2022).

Proven experience with patch management tools such as Microsoft SCCM, WSUS, or Intune.

Familiarity with vulnerability scanning tools (e.g., Qualys, Tenable, or Rapid7).

Strong understanding of Windows security updates, CVSS scoring, and risk prioritization.

Excellent troubleshooting, analytical, and problem-solving skills.

Ability to work independently and collaboratively within a cross-functional team environment.

Strong documentation and communication skills.

Preferred Qualifications

Experience integrating Qualys with SCCM or automating patch compliance reporting.

Scripting experience with PowerShell for patching, reporting, or remediation automation.

Understanding of ITIL processes and change management workflows.

Microsoft or security-related certifications such as MCSA, Microsoft Certified: Endpoint Administrator, or Qualys Certified Specialist.

Must-Have:

• Should be an immediate joiner or within 15 days from selection
• Must have at least 12+ 3 years of regular education
• Must be willing to join on third party payroll C2H and then move to TCS payroll upon BGV clearance