Key Responsibilities
• Manage Windows Server vulnerability findings from identification and prioritization through remediation, validation, evidence capture, and closure.
• Assess CVEs, CVSS ratings, vulnerability scan results, Microsoft security updates, and security advisories to determine appropriate remediation and priority.
• Plan and execute monthly Patch Tuesday deployments, emergency/out-of-band updates, and zero-day remediation across test, development, and production environments.
• Coordinate maintenance windows, change records, incidents, dependencies, approvals, and stakeholder communications in ServiceNow.
• Troubleshoot patching and update failures using Windows Update, WSUS, SCCM or Tanium, DISM/SFC, CBS and Windows Update logs, registry, disk-space, and reboot diagnostics.
• Verify patch installation and server health after deployment; track pending reboots, failed patches, and remediation actions through closure.
• Monitor critical and high-severity findings, SLA adherence, aging items, exceptions, and recurring patch failures; escalate blockers and maintain accurate status.
• Support vulnerability assessments, PCI requirements, audits, and security reviews by preparing remediation evidence, compliance reports, and management updates.
• Coordinate documented risk exceptions, compensating controls, and remediation plans when findings cannot be resolved within the required SLA.
• Help address legacy and end-of-life Windows Server systems through upgrades, migration, Extended Security Updates (ESU), replacement, or decommissioning plans.




• Develop and maintain PowerShell scripts to support vulnerability checks, patch compliance, remediation workflows, and reporting.
• Collaborate with application and infrastructure teams to assess impact, resolve dependencies, and deliver remediation with minimal service disruption.
• Provide technical guidance to L1/L2 support teams and engage Microsoft or other vendors when escalation is required. Required Skills
• Strong hands-on experience administering and patching Windows Server in an enterprise environment.
• Experience with Windows Server 2012 R2, 2016, 2019, and/or 2022, including support for legacy systems.
• Practical experience with enterprise vulnerability management and patch remediation, including remediation SLAs and prioritization of CVEs/CVSS findings.
• Experience deploying Microsoft security updates using one or more of WSUS, SCCM, or Tanium.
• Strong PowerShell scripting skills for administration, automation, validation, or reporting.
• Strong troubleshooting skills across Windows Update, Event Viewer, DISM, SFC, CBS, Windows Update logs, registry, disk space, and reboot-related issues.
• Working knowledge of Active Directory, Group Policy, DNS, TCP/IP, firewalls, RDP/RDS, WinRM, SMB, and TLS/SSL.
• Experience with change, incident, and remediation tracking, and with producing transparent technical evidence and status reports.
• Ability to coordinate effectively with security, compliance, application, infrastructure, and operations stakeholders.

📌 Lead Engineer (Bengaluru)
🏢 7-Eleven Global Solution Center – India
📍 Bengaluru