Patching Engineer Team Lead

Position Summary

The Patching Engineer Team Lead is responsible for overseeing the end-to-end patch management lifecycle across servers, endpoints, and infrastructure platforms to ensure security, stability, and compliance with organizational standards. This role leads a team of patching engineers in planning, coordinating, testing, and deploying operating system and application patches across on-premises and cloud environments.

The Team Lead partners closely with Security, Infrastructure Operations, Application Owners, and Compliance teams to prioritize vulnerabilities, evaluate risks, and implement timely remediation strategies. The position requires strong technical expertise in patch automation tools, vulnerability management platforms, and enterprise operating systems, as well as solid leadership capabilities to guide, mentor, and develop the patching team.

The successful candidate will drive continuous improvement in patching processes, champion automation and reporting enhancements, and ensure that patching activities meet service-level objectives with minimal impact to business operations. This role plays a critical part in maintaining the security posture and operational reliability of the organization's technology environment.

Key Responsibilities

Patching & System Maintenance:

Perform and oversee OS and application patching for Windows and Linux environments using enterprise patching tools such as WSUS, Landscape (Canonical), and other relevant technologies.

Execute backup and restore procedures prior to patch deployment to ensure system recoverability and risk mitigation.

Plan, coordinate, and perform operating system upgrades across Windows and Linux platforms.

Validate patch deployments, conduct post-patching health checks, and ensure compliance with internal patching standards.

Monitoring & Incident Handling:

Utilize SCOM as a day-to-day monitoring tool to track system health, performance, and patching impact.

Create, manage, and update Incident, Service Request, and Change Request tickets using ServiceNow ITSM.

Respond promptly to system alerts and assigned tickets, providing timely updates and resolution progress to stakeholders.

Team Leadership & Collaboration:

Lead a team of patching engineers to meet patch compliance targets, service levels, and operational goals.

Foster positive team dynamics by providing constructive feedback, coaching, and guidance to enhance team performance.

Collaborate with cross-functional infrastructure teams to ensure coordinated delivery of patching activities.

Stakeholder Management & Communication:

Conduct monthly service review meetings with key stakeholders, presenting performance metrics, patch compliance, risks, and improvement actions.

Provide regular communication and updates to business and technical stakeholders on patch schedules, potential impacts, and progress.

Documentation & Reporting:

Create, maintain, and update operational documentation, including patching procedures, SOPs, and runbooks.

Prepare and distribute daily and weekly progress reports to ensure visibility of patching status and team performance.

Review and update business SLA documents to ensure alignment with operational practices and service expectations.

Required Qualifications

Education: Bachelor in Computer Science or related discipline

Good written and verbal communication skills in English, Mandarin and Cantonese is a plus.

5 Years of relevant working experiences in Windows/Linux Patching technology

Basic understanding of Windows/Linux operating systems

Knowing in virtualization (VMware) technology is a plus.