Snr Security Patching Deployment Engineer in London - McGregor Boyall

Security Patching Deployment Engineer is required for this financial in London. To provide secure and reliable deployment of Microsoft Windows security patches across this financial org. workstations and servers using Ivanti Security Controls.

Technical skills / experience required:

Ivanti Security Controls

Windows Server and Windows Client administration (incl. Windows Update components, services, event logs, registry, file systems, PowerShell, Task Scheduler, certificates and software installation technologies.

Patch troubleshooting exp.

Experience of phased deployment, pilot or canary groups, maintenance windows, reboot orchestrations, service validation, rollback planning…

Working knowledge of Active Directory, Group Policy, DNS, TCP/IP, SMB, WinRM, remote administration and least-privilege operational access.

ServiceNow change

Strong PowerShell capability

London, Victoria - 6 months Contract

£575 – 675 per day

Hybrid working x3 days a week in office, x2 remote.

The role executes approved patching schedules, coordinates delivery with the offshore patch management consultant and technical service owners, troubleshoots failed deployments, validates completion evidence and escalates material exceptions.

The role is also responsible for identifying and implementing automation opportunities across patch scheduling, deployment, exception management and reporting to reduce manual effort, improve control effectiveness and support the transition towards a scalable future-state operating model.

Some responsibilities include:

Execute approved Windows security patch deployments across workstations and servers through Ivanti Security Controls, including scheduled, phased, manual and out-of-band releases.

Configure and machine groups, agent policies, patch groups, scan templates. Deployment templates, distribution settings and reboot behavior within approved standards.

Monitor deployments to completion, diagnose failed scans, downloads, installations, agent communications and reboots, and complete controlled re-deployment or rollback actions.

Maintain an accurate patch calendar and deployment scope with offshore patch management consultant, Platform Operations, Helpdesk, application owners and service owners.

Prepare implementation, validation, rollback and communication steps for each production change and retain evidence.

Automate and process improvements – Identify, design and implement automation opportunities across patch scheduling, deployment, exception management and reporting to reduce manual effort and improve operational efficiency.

Reduce dependency on spreadsheet-based tracking, email driven coordination and manual reconciliation through sustainable automation solutions.

Develop and maintain automated workflows for patch deployment preparation.