Windows SRE & Patch Management Specialist — PowerShell, AWS

About the job

Job Summary Synechron is seeking a Windows Administration Specialist to support the reliability, security, and scalability of Windows-based platforms across on-premises and AWS environments. The role will own Windows administration, patch management, automation, observability, and operational improvement. Success will be measured through improved patch compliance, reduced operational risk, reliable service performance, and increased automation.

Software Requirements Required

- Windows Server 2016, 2019, and 2022 administration

- PowerShell scripting and automation

- Enterprise patch management using Ivanti or an equivalent platform

- AWS services, including EC2, AMIs, Systems Manager, and patch baselines

- Monitoring and logging tools such as Datadog, Dynatrace, Splunk, or Sumo Logic

- ITSM tools such as ServiceNow or equivalent

- CI/CD tools such as Jenkins, Buildkite, or equivalent Preferred

- WSUS, SCCM/MECM, or comparable patching platforms

- Terraform, CloudFormation, DSC, or Ansible

- Git-based source control and infrastructure-as-code workflows

- Linux administration fundamentals

Overall Responsibilities

- Design, maintain, and secure highly available Windows Server environments.

- Own the full Windows patch management lifecycle, including assessment, scheduling, deployment, validation, reporting, and remediation.

- Operate and optimize Ivanti or equivalent patching solutions.

- Automate provisioning, configuration, patching, compliance checks, and operational tasks using PowerShell and IaC.

- Monitor Windows systems, investigate incidents, and resolve performance, stability, and security issues.

- Improve Windows hardening, vulnerability remediation, and patch compliance.

- Support Windows workloads, build agents, and services within CI/CD pipelines.

- Partner with SRE, platform, application, and security teams from design through production.

- Document standards, procedures, recovery steps, and operational decisions.

- Contribute to blameless postmortems and continuous improvement initiatives.

Expected outcomes:

- Consistent and measurable patch compliance

- Reduced unresolved vulnerabilities and configuration drift

- Improved system availability and incident response

- Increased automation and reduced manual operational effort

- Clear, current, and reusable technical documentation

Technical Skills (By Category) Programming and Scripting Essential:

- PowerShell scripting for administration, reporting, and automation

- Basic scripting practices including error handling, logging, testing, and version control Preferred:

- Python or another automation language Databases and Data Management Essential:

- Ability to review operational data, patch reports, logs, and compliance metrics Preferred:

- Basic SQL knowledge

- Experience managing configuration or asset data Cloud Technologies Essential:

- AWS EC2, AMIs, Systems Manager, and patch baselines

- Windows workload management in cloud environments Preferred:

- CloudFormation or Terraform

- Experience designing resilient and cost-aware cloud infrastructure Frameworks and Libraries Essential:

- Windows Server administration and Active Directory fundamentals

- PowerShell modules and Desired State Configuration concepts Preferred:

- Ansible or other configuration management frameworks Development Tools and Methodologies Essential:

- CI/CD integration for Windows applications and build agents

- Git-based workflows

- Infrastructure-as-code and configuration management principles

- Incident, change, and problem management practices Preferred:

- Experience with SRE practices, service-level objectives, and post-incident reviews Security Protocols and Compliance Essential:

- Windows security hardening

- Vulnerability remediation and patch compliance

- Access control, encryption, endpoint protection, and audit requirements

- Maintenance window planning and risk-based change management Preferred:

- Familiarity with recognized security and compliance frameworks

Experience Requirements

- Typically 3–5 years of experience in Windows Server administration, site reliability, infrastructure engineering, or a related role.

- Demonstrated experience managing Windows patching at enterprise scale.

- Practical experience with Ivanti or comparable patch management platforms.

- Experience supporting production systems across on-premises and AWS environments.

- Experience automating operational tasks with PowerShell.

- Financial services or other regulated-industry experience is preferred.

- Equivalent experience gained through technical training, certifications, internships, or progressively responsible infrastructure roles may be considered.

Day-to-Day Activities

- Review system health, alerts, patch status, vulnerabilities, and operational dashboards.

- Plan and coordinate maintenance windows and patch deployments.

- Test, deploy, validate, and report on Windows updates.

- Investigate incidents, performance issues, failed deployments, and compliance gaps.

- Develop PowerShell scripts and automation for recurring tasks.

- Manage AWS-based Windows instances, images, and Systems Manager configurations.

- Participate in stand-ups, incident reviews, change reviews, and planning sessions.

- Collaborate with SREs, engineers, application teams, security teams, and service owners.

- Contribute to CI/CD improvements, documentation, standards, and operational runbooks.

- Make decisions within approved change, security, and availability controls, escalating material risks when required.

Qualifications

- Degree, diploma, or equivalent practical experience in Information Technology, Computer Science, Engineering, or a related field.

- Relevant certifications are preferred, such as Microsoft Windows Server, AWS, ITIL, or security certifications.

- Completion of role-relevant training in Windows administration, PowerShell, cloud operations, security, and patch management.

- Ongoing learning is expected through technical training, knowledge sharing, certifications, and hands-on experimentation.

- Ability to participate in scheduled maintenance activities or incident response, where required by the operating model.

Professional Competencies