Systems Engineer

About the Role

Celtic Bank is seeking a Systems Patch Engineer to manage and optimize our enterprise patch management program. This role focuses on operating system and third-party application patching across Windows, Linux, and macOS environments using Tanium. The Systems Patch Engineer will design, implement, and maintain reliable patch deployment processes; administer Tanium policies and deployment rings; remediate vulnerabilities; and help ensure compliance with applicable IT, security, and regulatory standards.

Responsibilities

• Administer, configure, and maintain the Tanium platform, including patch modules, action groups, endpoint client health, and patch policy configuration
• Plan, schedule, and deploy operating system and third-party application patches across all Windows, Linux, and macOS systems using Tanium
• Design, implement, and maintain patch deployment rings, maintenance windows, and blackout periods that balance risk reduction with business availability
• Monitor, investigate, and remediate failed or missing patch deployments, partnering with Cybersecurity, Infrastructure, and application owners as needed
• Tune and refine patch policies to reduce deployment failures and end-user disruption while maintaining timely remediation of critical and high-severity vulnerabilities
• Track and report patch compliance metrics and SLA attainment for all in-scope systems to IT and security leadership
• Develop and maintain technical documentation, including patch configurations, operational procedures, and runbooks
• Collaborate with cross-functional teams to evaluate, recommend, and deploy new technologies that enhance patch and vulnerability management capabilities
• Provide tier 2/3 support for escalated issues related to Tanium, patch deployment, and endpoint remediation
• Participate in audits, risk assessments, and remediation activities related to patch and vulnerability management controls
• Support change management, incident response, and disaster recovery processes for in-scope systems

Requirements

• Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field, or equivalent combination of education and experience
• 3-5 years of hands-on experience administering enterprise IT systems, with a focus on patch and vulnerability management
• Demonstrated experience administering Tanium, including the Patch, Deploy, and Comply modules, action groups, and endpoint client health management
• Working knowledge of vulnerability management and remediation practices, including CVE/CVSS prioritization, patch testing, and compliance reporting
• Proficiency patching Windows Server and desktop operating systems, Linux distributions, and common third-party applications
• Familiarity with PowerShell and Bash for automation, reporting, and administration of patching workflows
• Understanding of information security principles, data classification, and regulatory requirements applicable to financial institutions (e.g., GLBA, FFIEC, ISO 27001)
• Strong analytical, troubleshooting, and documentation skills
• Ability to communicate technical concepts clearly to both technical and non-technical audiences

Benefits

• Medical, dental, and vision coverage
• 401(k) with employer match
• Life and long-term disability coverage
• HSA and FSA plans
• Paid holidays and paid time off
• Robust wellness program (catered meals three times a week, lunch and learns, and onsite gym)

Work Environment

This job operates in a professional office environment. The role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets, and fax machines.

• Stationary Work: Frequently required to stand, walk, use hands to type, handle documents, and perform other office-related duties. Exerting up to 10 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull, or otherwise move objects.
• Mobility: Occasionally move between work sites and inside the office to access file cabinets, office machinery, etc.
• Communication: Regularly required to talk or hear and will frequently communicate with others. Must be able to read, write, and understand fluent English.

Schedule

This position will work either a fully Onsite or Hybrid work model. All employees, regardless of location, may be required to travel to the Salt Lake City office for mandatory company meetings, events, or related occasions.

• Utah-based employees: Hybrid work schedule available after initial training period in the Salt Lake City, Utah office—eligibility determined by department and job requirements.