Senior Engineer - Patch Operations

JOB DESCRIPTION

The Big Picture

Sysco LABS is the Global In-House Center of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco ranks 56th in the Fortune 500 list and is the global leader in the trillion-dollar foodservice industry .

Sysco employs over 75,000 associates, has 337 smart distribution facilities worldwide and over 14,000 IoT-enabled trucks serving 730,000 customer locations. For fiscal year 2025 that ended June 29, 2025, the company generated sales of more than $81.4 billion .

Sysco LABS Sri Lanka delivers the technology that powers Sysco’s end-to-end operations .

Sysco LABS’ enterprise technology is present in the end-to-end foodservice journey, enabling the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network and the in-restaurant dining experience of the end-customer.

• Location: Sri Lanka
• Employment Type: Full-Time
• Department: Patching Operations

• Title : Senior Engineer – Patch Operations (Windows / Linux)
• Experience Level: 3 - 5 Years

About the Role

We are seeking a highly motivated Senior Engineer to join our Patch Operations team. The successful candidate will be responsible for maintaining operating system security compliance through vulnerability remediation, patch deployment, and platform lifecycle management across a large-scale hybrid infrastructure.

The role supports Windows and Linux server environments hosted across on-premises and multi-cloud platforms, ensuring security vulnerabilities are remediated within defined SLA timelines while maintaining platform stability and availability.

Our Environment

Enterprise-scale Windows and Linux server infrastructure

Multi-Cloud Platforms: AWS, Microsoft Azure, Google Cloud Platform (GCP)

Virtualization Platforms: Nutanix AHV and VMware vSphere

Patch Management Platform: Tanium

Vulnerability Management Tools: Qualys, Tenable, Rapid7, or equivalent

Infrastructure Automation: PowerShell, Bash, Ansible, Terraform

ITSM Platform: ServiceNow

Global 24x7 Operations Environment

Key Responsibilities

Patch Management & Remediation

Deploy monthly operating system security patches across Windows and Linux server environments.

Utilize Tanium to schedule, deploy, monitor , and validate patch compliance activities.

Coordinate emergency and Zero-Day vulnerability remediation activities.

Perform vulnerability remediation in accordance with organizational security policies and SLAs.

Validate successful installation of patches and security updates.

Investigate and resolve failed patch deployments.

Vulnerability Management

Analyze vulnerability reports and prioritize remediation activities based on risk ratings.

Collaborate with Cyber Security teams to address critical and high-risk vulnerabilities.

Track remediation progress and maintain compliance reporting.

Infrastructure Operations

Support Windows Server (2012, 2016, 2019, 2022) and Linux (RHEL, Rocky, Ubuntu, Amazon Linux) environments.

Coordinate patching activities across Nutanix, VMware, AWS, Azure, and GCP hosted workloads.

Participate in maintenance windows and change management activities.

Support server lifecycle management activities including build, migration, and decommissioning.

Troubleshoot OS-related issues resulting from patch deployments.

Automation & Reporting

Develop and maintain PowerShell and Bash scripts to automate operational tasks.

Create and maintain patch compliance dashboards and reporting metrics.

Contribute to infrastructure automation initiatives.

Identify opportunities to improve patching efficiency and reduce manual effort.

Operational Excellence

Participate in patch planning, scheduling, and execution meetings.

Coordinate with application owners, infrastructure teams, and business stakeholders.

Maintain operational documentation, runbooks, and standard operating procedures.

Support audit and compliance requirements related to security patching.

Required Skills & Experience

Technical Skills

Experience managing Windows or Linux server environments.

Experience using enterprise patch management solutions such as Tanium, SCCM, BigFix, or equivalent.

Understanding of vulnerability management and remediation processes.

Knowledge of Windows Update or Linux package management, and security patching practices.

Familiarity with VMware vSphere and Nutanix AHV platforms.

Understanding of AWS, Azure, and GCP infrastructure concepts.

Experience with PowerShell and Bash scripting.

Knowledge of Active Directory and Windows Server administration (Windows Engineers) .

Understanding of networking fundamentals (DNS, TCP/IP, Firewall, Load Balancing).

Operational Skills

Experience working in enterprise IT operations environments.

Understanding of Change Management and ITIL processes.

Ability to troubleshoot complex patching and vulnerability issues.

Strong analytical and problem-solving skills.

Excellent communication and stakeholder management abilities.

Preferred Qualifications

Bachelor’s degree in computer science, IT, or related field .

Experience with Tanium Patch Management or any other patching tool .

Experience with vulnerability management tools such as Qualys, Tenable, Rapid7, or Nessus would be an added advantage .

Familiarity with Azure Update Manager and AWS Systems Manager Patch Manager.

Experience supporting enterprise environments with 1,000+ servers would be an added advantage .

Microsoft, AWS, Azure, or GCP certifications (for Windows Engineers) .

Red Hat, AWS, Azure, or GCP certifications (for Linux Engineers)

Benefits

Performance-based annual bonus

Performance rewards and recognition

Agile Benefits - special allowances for Health, Wellness & Academic purposes

Paid birthday leave Team engagement allowance

Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws

Hybrid work arrangement

Sysco LABS is an Equal Opportunity Employer.