Substrate PAVC Engineer
Core
Automate and troubleshoot Windows security patching, antivirus updates, and vulnerability compliance across large server fleets.
Role type
Senior IC Windows patching and compliance engineer
Builds
Production patching workflows and compliance dashboards
Domain
IT Operations / Windows Server / Security Compliance
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
PowerShell scripting, Kusto Query Language (KQL), Windows servicing, troubleshooting deployment failures, log analysis, DISM, WSUS, MSU installation
Preferred skills
Azure DevOps pipelines, .NET tooling, Defender servicing, Qualys, AzSecPack, CVE mapping, Windows Server 2025 hotpatching, STIGs, WinPE
Technologies
PowerShell, Kusto, Windows Update, WSUS, DISM, Defender, Qualys, AzSecPack, Azure DevOps
Responsibilities
Support monthly Windows security patch rollouts and Defender updates; Use PowerShell automation for deployment and reporting; Investigate deployment failures using KQL and logs; Troubleshoot failed updates and MSU installations; Maintain compliance dashboards and status updates; Coordinate with teams to resolve patching blockers.
Seniority
Senior, hands-on IC
