Software Patching and Lifecycle Management Engineer II

Mitsubishi Heavy Industries, Ltd.•Orlando, FL

About The Position

The Software Patching, Lifecycle & OT Cybersecurity Engineer II independently executes and supports patching, vulnerability management, and lifecycle maintenance activities for operational technology (OT) and control system environments. This role supports Windows- and Linux-based systems operating in both air-gapped control system environments and remote enterprise OT infrastructures. This position performs hands-on patching, vulnerability scanning, remediation coordination, scripting, and documentation activities, while escalating complex risk decisions and architectural issues to senior engineers. The role plays a key role in ensuring systems remain secure, stable, and compliant with cybersecurity and operational requirements.

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related field; or equivalent relevant experience.
2–4 years of experience in patch management, systems administration, OT support, cybersecurity operations, vulnerability management, or a related technical discipline.
Strong hands‑on experience with Windows and Linux administration, including patch deployment and lifecycle maintenance.
Experience executing patching and vulnerability management activities, including remediation planning and tracking.
Working knowledge of scripting and automation using PowerShell, Python, and/or Bash.
Experience supporting virtualized environments, including platforms such as VMware ESXi and Proxmox.
Familiarity with OT, industrial control systems (ICS), or critical infrastructure environments, including cybersecurity concepts such as vulnerability management, least privilege, secure update handling, audit documentation, and risk acceptance.
Strong analytical, problem‑solving, organizational, and communication skills, with the ability to manage recurring deliverables, support customers remotely and onsite, and work effectively with cross‑functional teams.

Nice To Haves

Experience with endpoint management and deployment tools (e.g., Tanium) and maintaining offline repositories for Windows and Linux updates preferred.
Knowledge of regulatory cybersecurity requirements, such as NERC CIP, is preferred.

Responsibilities

Execute operating system and application patching across Windows and Linux environments in accordance with approved schedules, maintenance windows, and change management requirements.
Perform vulnerability scanning and analysis, evaluating CVEs, severity ratings, exploitability, and remediation requirements.
Coordinate remediation efforts with system owners and validate corrective actions through re‑scans and functional verification.
Develop and maintain patch deployment packages for offline, air‑gapped, and restricted environments.
Administer and support patch management tools (e.g., WSUS), including deployment, reporting, and tracking activities.
Develop and maintain automation scripts using PowerShell, Python, or Bash to improve patching efficiency, reporting, and operational processes.
Support lifecycle maintenance and patching of virtualized environments, including VMware ESXi and Proxmox platforms.
Troubleshoot patching, scanning, and update issues, performing root cause analysis and coordinating resolution with internal teams or vendors.
Maintain technical documentation, validation records, cybersecurity evidence, and audit support materials, including compliance documentation for regulated environments such as NERC CIP.
Collaborate with engineering, cybersecurity, infrastructure, and field service teams to ensure secure, reliable, and compliant system operations while driving continuous improvement initiatives.