BigFix Engineer - Hybrid in Louisville, KY

NTT DATA Services•Louisville, KY

4d•Hybrid

About The Position

We are looking for a seasoned BigFix Engineer to join our US-based endpoint management team. This role is responsible for delivering and managing enterprise-grade patch management and OS image deployment services using HCL BigFix. The engineer will ensure endpoint compliance, security patching hygiene, and seamless OS deployment across large-scale Windows environments, serving as a subject matter expert for BigFix Lifecycle and Patch operations. This hybrid position requires to be onsite at the client’s location 2-3 business days in their Louisville, KY office.

Requirements

3-5 years of experience with HCL BigFix, specifically in patch management, software distribution, and OS deployment
Proven experience managing large-scale Windows environments (Windows 10/11, Windows Server)
Experience designing and managing end-to-end patch management operations using HCL BigFix Patch
Experience with BigFix Lifecycle OSD module for OS deployment

Nice To Haves

Digital Workplace Services experience
Ability to collaborate with security and vulnerability management teams to meet SLAs
Effective communication skills to handle L2/L3 escalations and root cause analysis
Working knowledge of SCCM and Microsoft Intune for hybrid patch management scenarios
Experience supporting integration between BigFix and SCCM/Intune
Experience with REST API for advanced reporting and automation
Knowledge of application layering and post-deployment configuration in OSD workflows
Experience in a similar role within a large enterprise or managed services environment
Experience leading or contributing to OS migration projects or large-scale deployment initiatives
Ability to write and debug BigFix Relevance expressions and Action Scripts
Familiarity with SQL-based query generation for reporting and dashboard creation
Experience troubleshooting image deployment failures and driver conflicts
Experience managing BigFix Relay hierarchy, client health, and bandwidth optimization
Familiarity with PowerShell, Batch scripting, and automation of workflows
Willingness to support on-call operations for critical patching events and incident responses
Relevant certifications in BigFix or endpoint management (e.g., BigFix Certified Professional)

Responsibilities

Design, configure, and manage end-to-end patch management operations using HCL BigFix Patch across enterprise environments.
Develop and maintain custom Fixlets, Baselines, and Tasks for OS and third-party patch deployment.
Define and enforce patch policies, maintenance windows, and exception management processes across endpoint fleets.
Monitor and maintain high patch compliance rates across Windows 10/11, Windows Server, and Linux endpoints.
Perform patch testing, staging, and phased rollout across controlled deployment rings.
Troubleshoot failed patches, client-side installation errors, and relay-side distribution issues.
Generate patch compliance reports and dashboards using BigFix WebUI, REST API, and SQL-based queries.
Collaborate with security and vulnerability management teams to ensure timely remediation aligned with organizational SLAs.
Manage Microsoft Patch Tuesday cycles, out-of-band updates, and zero-day emergency patching scenarios.
Design and manage OS deployment workflows using the BigFix Lifecycle OSD (OS Deployment) module.
Build, maintain, and version-control Windows 10/11 master images aligned with organizational and compliance standards.
Configure and manage WinPE boot environments, task sequences, and deployment profiles within BigFix.
Integrate driver management, application layering, and post-deployment configuration into OSD workflows.
Support bare-metal deployments, OS refresh, and OS migration projects at enterprise scale.
Manage image capture, customization, and deployment through BigFix OSD profiles and multicast delivery.
Troubleshoot image deployment failures, driver conflicts, and post-imaging configuration issues.
Partner with application packaging teams to ensure software readiness within deployed images.
Manage BigFix Relay hierarchy, client health, and bandwidth optimization across geographically distributed US sites.
Monitor BigFix Root Server and Relay performance, ensuring replication and content delivery health.
Develop PowerShell, Batch, and BigFix Action Script automations to support patch and imaging workflows.
Write BigFix Relevance expressions for endpoint targeting, inventory gathering, and compliance validation.
Conduct regular BigFix infrastructure maintenance, cleanup, and version upgrade activities.
Handle L2/L3 escalations for patch and imaging incidents, performing root cause analysis and resolution.
Support on-call operations for critical patching events and Sev 1/2 incident response.
Working knowledge of SCCM / Microsoft Intune for co-existence and hybrid patch management scenarios.
Support integration between BigFix and SCCM/Intune where required for transition or co-managed environments.