Principal Infrastructure Engineer - Server / BigFix Patch Engineer

FC Global Services India LLP (First Citizens India), a part of First Citizens BancShares, Inc., a top 20 U.S. financial institution, is a global capability center (GCC) based in Bengaluru. Our India-based teams benefit from the company’s over 125-year legacy of strength and stability. First Citizens India is responsible for delivering value and managing risks for our lines of business. We are particularly proud of our strong, relationship-driven culture and our long-term approach, which are deeply ingrained in our talented workforce. This is evident across all key areas of our operations, including Technology, Enterprise Operations, Finance, Cybersecurity, Risk Management, and Credit Administration. We are seeking talented individuals to join us in our mission of providing solutions fit for our clients’ greatest ambitions.

Job Description:

Job Description Patch Management – BigFix / Server Patching Engineer

Value Proposition

As a Patch Engineer, this role is integral to leading enterprise-wide patch management, vulnerability remediation, and compliance initiatives. The position leverages advanced expertise in BigFix, automation, PowerShell scripting and vulnerability scanning tools like Qualys to secure enterprise systems. The engineer will play a technical role along with mentoring L2 teams for technical issues and help automate patching processes for improved efficiency and robust compliance.

Job Details

Position Title: Principal Engineer – Patch Management

Career Level: P4

Role Type: Hybrid

Job Location: Bangalore

About the Team:

First Citizens Bank is one of the top financial services providers, recognized and awarded for our customer satisfaction, sustainable profitability, and overall stability and security. Our associates make First Citizens Bank a great place for our clients to do business. Those who grow, achieve and succeed with First Citizens Bank are those who share our core values of integrity, service excellence and stability.

Our Patch Management team requires a highly experienced Principal Engineer responsible for driving engineering, automation and support for security and application patching in the Infrastructure Operations area. Leads the patching / vulnerability remediation of infrastructure and applications that are hosted in datacenter and are critical for banking operations, tracks issues during patching and automate remediation of vulnerabilities and reporting.

Impact (Job Summary/Why this Role Matters)

This Principal Engineer position is essential for enforcing security standards, ensuring compliance, and protecting the organization from threats. The role is pivotal in setting up automation and best practices in patching, participating in vulnerability remediation, and providing direction and mentorship to junior associates

Key Deliverables (Duties and Responsibilities)

• Responsible to maintain the core BigFix environment, including Root Servers, Relay hierarchies, Database Replication (DSA), and WebUI health.
• Design, implement, monitor, tune, and troubleshoot health of BigFix client and infrastructure including managing relay affiliation, recommendations of relay placement, Peer Nest etc.
• Patch and upgrade BigFix clients and server environment with latest updates.
• Provide mentoring and support to other engineers for best practice of advanced scripting, use of APIs, automation, and database services.
• Work with architects, integration engineers, and developers to design/integrate solutions. Improving data quality, security, and compliance.
• Build dashboards to enable reporting of patch and vulnerability compliance using BigFix Insights for Vulnerability Remediation (IVR)
• Identify and manage solution dependencies with other systems and elements of the enterprise IT infrastructure.
• Assess software patches and create recommended patch list with logical explanation in terms of compliance.
• Develop and optimize pre- and post- patching processes to ensure proper implementation without any outages.
• Score each patch based on risks & opportunity to prioritize. Identify which patches are more valuable to the organization than others.
• Act as an escalation point for patch execution / L2 team mentoring them and resolving complex scenarios and technical issues.
• Ensures overall service levels for infrastructure uptimes through patch management standards, firmware upgrades and vendor based advisory.
• Develops automation scripts and programs to streamline manual patch operations and improve mean time to deliver and first-time right metrics.
• Lead rapid assessments and accelerated rollouts in response to critical and zero-day threats.
• Oversee pre-deployment patch testing in pilot environments to ensure compatibility and prevent disruptions to business operations.
• Establish security governance, maintain audit readiness, and provide executive-level dashboards regarding patch compliance and risk reduction.
• Partner closely with cyber security operations, vulnerability management, and infrastructure teams to map threat intelligence to asset criticality.

Skills and Qualification (Functional and Technical Skills)

• Must have

10+ years of deep exposure in various Server OS platforms (Windows, RHEL) patch management, vulnerability remediation, and achieve compliance using various tools (BigFix, Qualys, PowerShell scripting).

• Technical Skills:
  • Expert level knowledge in BigFix framework & BigFix Relevance and ActionScript, with hands on experience deploying software, policy & remediation actions.
  • Proficient at PowerShell and\or Python to work with automating tasks.
  • Experience building custom Web Reports with HTML and Relevance preferred.
  • Minimum of 7 years' experience administering BigFix or similar tools (Microsoft SCCM as subject matter expert).
  • Working knowledge with deployment, configuration and building compliance dashboards with BigFix Insights for Vulnerability Remediation 
  • Hands on experience with deployment, configuration, customization, and endpoint management in a large enterprise setting.
  • Extensive experience implementing and use of BigFix and SCCM native APIs and WMI tool query methods and use of schemas.
  • Illustrate effective inventory methods, patch management, hardware asset discovery, software deployment, configuration settings management, etc.
  • Expertise in writing and applying fixlets\tasks as well as analysis. Develop custom Fixlets, Tasks, and Baselines for rapid OS and third-party software patching.
  • Experience with patching Linux servers is preferred.
  • Proven track record of developing and deploying provisioning methods, scripts, and applications through BigFix.
  • Use of the relevant key technologies Active Directory, LDAP, GPOs, PowerShell, SSH, etc.
  • SME of Microsoft SQL database, database definition, procedures, and advanced
  • Act as an expert support resource for multiple server/ desktop technology stack components. Assist and mentor system administrators and technicians to foster personal growth and accountability.

• Good to have
• Technical Skills:
  • Understanding of software package creation and deployments.
  • Understanding of patch deployments via MECM along with MECM administration

• Soft Skills:
  • Excellent written and verbal communication along with strong documentation skills, including the ability to communicate complex technical concepts to non-technical stakeholders.
  • Ability to work independently and as part of a team in a fast-paced environment.
  • Self-motivated, with a "can-do" attitude and comfort working with ambiguity.
  • Strong customer service skills and a customer-focused mindset.

Preferred Qualifications:

• Experience working in the banking or financial services industry is a plus.
• Familiarity with Agile and Waterfall project management methodologies.
• Knowledge of network topology and security principles.
• Experience with enterprise applications specific to the banking industry.
• Knowledge of collaboration tools like Jira, or Confluence.

Relationships & Collaboration

• Ensure great Partnership with IT counterparts (India as well as US associates).
• Be available for team connects if any.
• Flexible to adjust work schedules including evening, weekend, as per Org need.
• Collaborate with Business wherever necessary.

Shift Support: 5:30 PM – 2:30 AM (IST)

Equal Employment Opportunity

FC Global Services India LLP (First Citizens India) is an Equal Employment Opportunity Employer. We are committed to fostering an inclusive and accessible environment and prohibit all forms of discrimination on the basis of gender, religion, caste, disability, sexual orientation, economic status or any other characteristics protected by the law. We strive to foster a safe and respectful environment in which all individuals are treated with respect and dignity. Our EEO policy ensures fairness throughout the employee life cycle.