Substrate PAVC Engineer
Core
Support patching, antivirus, and vulnerability compliance across Microsoft Substrate environments for a large server fleet.
Role type
Senior IC Windows Systems Engineer (Patch Management & Automation)
Builds
Windows security patches, Defender updates, .NET updates, and vulnerability remediation workflows
Domain
IT Operations / Cybersecurity / Microsoft Enterprise Infrastructure
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
PowerShell scripting, Kusto Query Language (KQL), Windows servicing, troubleshooting deployment failures, log analysis, DISM, WSUS, Safe Deployment Practices
Preferred skills
Azure DevOps pipelines, .NET tooling, Defender servicing, Qualys/AzSecPack, CVE mapping, Windows Server 2025 hotpatching, STIGs, WinPE
Technologies
PowerShell, Kusto, Windows Update, MSU, DISM, Event Viewer, CBS, Defender, WSUS, Azure DevOps, Qualys, AzSecPack
Responsibilities
Support monthly Windows security patch rollouts and Defender/.NET updates; Use PowerShell automation for deployment and reporting; Investigate deployment failures using KQL and logs; Troubleshoot failed updates and installation errors; Maintain compliance dashboards and status updates; Coordinate with engineering and security teams on exceptions and blockers
Seniority
Senior, hands-on IC
