Patch Management Specialist

The Patch Management Specialist, Junior supports the patch management lifecycle for desktops, laptops, and remote endpoints to maintain secure, stable, and compliant enterprise environments. The role assists with identifying required operating system and application patches, coordinating testing, and deploying updates to reduce vulnerabilities and meet organizational policies. The specialist monitors patch status and compliance dashboards, performs initial troubleshooting, and escalates issues that may affect mission‑critical systems.

• →Apply foundational patch management principles to identify, test, and deploy OS and application updates across enterprise endpoints using standard patch management tools.
• →Support coordination of routine and emergency patch cycles, including pre‑deployment testing, change approvals, maintenance window planning, and rollback procedures for desktops and remote devices.
• →Monitor vulnerability and patch compliance reports, interpret risk levels, and work with senior administrators to remediate non‑compliant systems according to standards.
• →Use basic network and systems administration concepts to understand dependencies between endpoints, servers, and networks when planning and troubleshooting patch deployments.
• →Assist with implementing automated patch workflows, including scheduling, targeting device groups, validating successful installation, and documenting results for audits.
• →Maintain documentation for patch baselines, deployment procedures, known issues, and SOPs to support repeatable and compliant operations.
• →Collaborate with cybersecurity and vulnerability management staff so patching activities align with current threats, advisories, and security policies.

• Bachelor’s degree in IT, Computer Science, or a related field, or equivalent experience.
• Typically 0–3 years of related experience in systems administration, IT support, or cybersecurity in an enterprise environment.
• Understanding of basic patch management concepts and familiarity with common tools (for example, WSUS, SCCM, or similar).
• Strong problem‑solving, analytical, communication, and interpersonal skills, with the ability to handle multiple tasks.
•  Candidates must have a current secret security clearance.

• Familiarity with the program’s IT environment and data security best practices.
• Relevant entry‑level security or infrastructure certifications that include patching and vulnerability remediation topics.
• Exposure to enterprise patch tools such as Microsoft Configuration Manager (SCCM) or WSUS.

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.