Senior Patching Engineer

At Ensono, our Purpose is to be a relentless ally, disrupting the status quo and unleashing our clients to Do Great Things! We enable our clients to achieve key business outcomes that reshape how our world runs. As an expert technology adviser and managed service provider with cross-platform certifications, Ensono empowers our clients to keep up with continuous change and embrace innovation.

We can Do Great Things because we have great Associates. The Ensono Core Values unify our diverse talents and are woven into how we do business. These five traits are the key to achieving our purpose:

Honesty, Reliability, Curiosity, Collaboration, and Passion.

We are looking for someone near Downers Grove, Illinois or Madison, Wisconsin to take on this hybrid role. You'll need to travel between locations as needed for client meetings.

About the role and what you'll be doing:

We are seeking a Patch Analyst with deep hands-on experience across enterprise patch management and configuration automation platforms, including Tanium, Ansible, Puppet, SCCM, Ivanti, Azure Update Manager, and Foreman, along with foundational knowledge of AWS. The analyst will support patching operations across global data centers in the US, UK, and Europe, ensuring secure, compliant, and timely deployment cycles.

We want all new Associates to succeed in their roles at Ensono. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Required Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply.

Key Responsibilities:

• Implement and maintain standardized patching processes across Windows, Linux, and non-Windows environments.
• Use Tanium to deploy OS and third‑party patches, perform compliance assessments, and troubleshoot deployment issues.
• Leverage Ansible and Puppet for configuration drift management and automated patch application.
• Coordinate and deploy monthly security patches using Foreman, Ivanti, SCCM, Azure Update Manager, Tanium, and AWS.
• Analyze vulnerability scan results and coordinate remediation.
• Conduct compliance and configuration health checks.
• Log and manage incidents and changes, including CAB participation.
• Maintain documentation and develop Master Patch Records.
• Support emergency patching and high‑impact vulnerability response.

• 6-10 years of patch management experience.
• Expertise in Tanium, Ansible, Puppet, SCCM, Ivanti, Azure Update Manager, AWS.
• Background in VMware, Active Directory, SQL/Oracle.
• Strong scripting skills in PowerShell, Bash, or Python.
• Knowledge of CIS, NIST, DISA, STIG hardening standards.
• Strong communication and documentation abilities.
• Willingness to work in 24×7 shifts.

• Deep understanding of OS vulnerabilities and patch cycles.
• Strong networking and security fundamentals.
• Ability to automate remediation tasks.
• Self-driven and detail-oriented.

• Unlimited Paid Days Off
• Three health plan options
• 401k with company match
• Eligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts
• Family Forming Benefit including fertility coverage and adoption/surrogacy reimbursement
• Paid childbearing and paternal leave
• Education Reimbursement, Student Loan Assistance or 529 College Funding
• Sabbatical leave
• Wellness program
• Flexible work schedule