Job Opportunities API

Celtic Bank is seeking a Systems Patch Engineer to manage and optimize our enterprise patch management program. This role focuses on operating system and third-party application patching across Windows, Linux, and macOS environments using Tanium. The Systems Patch Engineer will design, implement, and maintain reliable patch deployment processes; administer Tanium policies and deployment rings; remediate vulnerabilities; and help ensure compliance with applicable IT, security, and regulatory standards. The ideal candidate combines strong Tanium expertise with practical experience in vulnerability remediation, endpoint management, automation, and cross-functional collaboration. Essential Job Functions Administer, configure, and maintain the Tanium platform, including patch modules, action groups, endpoint client health, and patch policy configuration. Plan, schedule, and deploy operating system and third-party application patches across all Windows, Linux, and macOS systems using Tanium. Design, implement, and maintain patch deployment rings, maintenance windows, and blackout periods that balance risk reduction with business availability. Monitor, investigate, and remediate failed or missing patch deployments, partnering with Cybersecurity, Infrastructure, and application owners as needed. Tune and refine patch policies to reduce deployment failures and end-user disruption while maintaining timely remediation of critical and high-severity vulnerabilities. Track and report patch compliance metrics and SLA attainment for all in-scope systems to IT and security leadership. Develop and maintain technical documentation, including patch configurations, operational procedures, and runbooks. Collaborate with cross-functional teams to evaluate, recommend, and deploy new technologies that enhance patch and vulnerability management capabilities. Provide tier 2/3 support for escalated issues related to Tanium, patch deployment, and endpoint remediation. Participate in audits, risk assessments, and remediation activities related to patch and vulnerability management controls. Support change management, incident response, and disaster recovery processes for in-scope systems.