Software Patching and Lifecycle Management Engineer II

At Mitsubishi Power, we're not just building better clean energy technologies; we're architecting a better future. Our team is boldly redefining power generation to accelerate the world's energy transition. We operate as one team, pushing toward our vision of the future. We value problem solvers, prioritize collaboration, and support each other in an inclusive culture built on accountability and authenticity by demonstrating our values: Safety, Family, Innovative, Inclusive, Accountable & Courageous. Together, we’re building the future we all aspire to—making net zero a reality.

About the Role

The Software Patching, Lifecycle & OT Cybersecurity Engineer II independently executes and supports patching, vulnerability management, and lifecycle maintenance activities for operational technology (OT) and control system environments. This role supports Windows- and Linux-based systems operating in both air-gapped control system environments and remote enterprise OT infrastructures. The position performs hands-on patching, vulnerability scanning, remediation coordination, scripting, and documentation activities, while escalating complex risk decisions and architectural issues to senior engineers. The role plays a key role in ensuring systems remain secure, stable, and compliant with cybersecurity and operational requirements.

Responsibilities

• Demonstrates core competencies: Action oriented, change champion, customer-focused, developing self & others, and ownership.
• Execute operating system and application patching across Windows and Linux environments in accordance with approved schedules, maintenance windows, and change management requirements.
• Perform vulnerability scanning and analysis, evaluating CVEs, severity ratings, exploitability, and remediation requirements.
• Coordinate remediation efforts with system owners and validate corrective actions through re-scans and functional verification.
• Develop and maintain patch deployment packages for offline, air-gapped, and restricted environments.
• Administer and support patch management tools (e.g., WSUS), including deployment, reporting, and tracking activities.
• Develop and maintain automation scripts using PowerShell, Python, or Bash to improve patching efficiency, reporting, and operational processes.
• Support lifecycle maintenance and patching of virtualized environments, including VMware ESXi and Proxmox platforms.
• Troubleshoot patching, scanning, and update issues, performing root cause analysis and coordinating resolution with internal teams or vendors.
• Maintain technical documentation, validation records, cybersecurity evidence, and audit support materials, including compliance documentation for regulated environments such as NERC CIP.
• Collaborate with engineering, cybersecurity, infrastructure, and field service teams to ensure secure, reliable, and compliant system operations while driving continuous improvement initiatives.

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related field; or equivalent relevant experience.
• 2–4 years of experience in patch management, systems administration, OT support, cybersecurity operations, vulnerability management, or a related technical discipline.
• Strong hands-on experience with Windows and Linux administration, including patch deployment and lifecycle maintenance.
• Experience executing patching and vulnerability management activities, including remediation planning and tracking.
• Working knowledge of scripting and automation using PowerShell, Python, and/or Bash.
• Experience supporting virtualized environments, including platforms such as VMware ESXi and Proxmox.
• Familiarity with OT, industrial control systems (ICS), or critical infrastructure environments, including cybersecurity concepts such as vulnerability management, least privilege, secure update handling, audit documentation, and risk acceptance.
• Experience with endpoint management and deployment tools (e.g., Tanium) and maintaining offline repositories for Windows and Linux updates preferred.
• Knowledge of regulatory cybersecurity requirements, such as NERC CIP, is preferred.
• Strong analytical, problem-solving, organizational, and communication skills, with the ability to manage recurring deliverables, support customers remotely and onsite, and work effectively with cross-functional teams.

Benefits

• Medical, dental, and vision coverage.
• 401K matching.
• Tuition reimbursement and on-the-job training.
• Paid vacation, sick time, and holidays.
• Employee appreciation programs and events.