Systems Engineer

Celtic Bank • Salt Lake City, UT

10d

About The Position

Celtic Bank is seeking a Systems Patch Engineer to manage and optimize its enterprise patch management program. The role focuses on operating system and third-party application patching across Windows, Linux, and macOS environments using Tanium. The engineer will design, implement, and maintain reliable patch deployment processes; administer Tanium policies and deployment rings; remediate vulnerabilities; and help ensure compliance with applicable IT, security, and regulatory standards. The position supports change management, incident response, disaster recovery, audits, risk assessments, and remediation activities. The role operates in a professional office environment and may be fully onsite or hybrid. Utah-based employees may be eligible for a hybrid schedule after the initial training period in the Salt Lake City office, subject to department and job requirements. Employees may be required to travel to the Salt Lake City office for mandatory meetings and events.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field, or an equivalent combination of education and experience.
• 3–5 years of hands-on experience administering enterprise IT systems, focused on patch and vulnerability management.
• Demonstrated experience administering Tanium, including the Patch, Deploy, and Comply modules, action groups, and endpoint client health management.
• Working knowledge of vulnerability management and remediation practices, including CVE/CVSS prioritization, patch testing, and compliance reporting.
• Proficiency patching Windows Server and desktop operating systems, Linux distributions, and common third-party applications.
• Familiarity with PowerShell and Bash for automation, reporting, and administration of patching workflows.
• Understanding of information security principles, data classification, and regulatory requirements applicable to financial institutions, such as GLBA, FFIEC, and ISO 27001.
• Strong analytical, troubleshooting, and documentation skills.
• Ability to communicate technical concepts clearly to technical and non-technical audiences.
• Ability to meet the physical and communication requirements of the role, including frequent standing, walking, office-related hand use, and fluent English reading, writing, and comprehension.

Responsibilities

• Administer, configure, and maintain the Tanium platform, including patch modules, action groups, endpoint client health, and patch policy configuration.
• Plan, schedule, and deploy operating system and third-party application patches across Windows, Linux, and macOS systems using Tanium.
• Design, implement, and maintain patch deployment rings, maintenance windows, and blackout periods that balance risk reduction with business availability.
• Monitor, investigate, and remediate failed or missing patch deployments in partnership with Cybersecurity, Infrastructure, and application owners.
• Tune and refine patch policies to reduce deployment failures and end-user disruption while maintaining timely remediation of critical and high-severity vulnerabilities.
• Track and report patch compliance metrics and SLA attainment for in-scope systems to IT and security leadership.
• Develop and maintain technical documentation, including patch configurations, operational procedures, and runbooks.
• Collaborate with cross-functional teams to evaluate, recommend, and deploy technologies that enhance patch and vulnerability management capabilities.
• Provide tier 2/3 support for escalated issues related to Tanium, patch deployment, and endpoint remediation.
• Participate in audits, risk assessments, and remediation activities related to patch and vulnerability management controls.
• Support change management, incident response, and disaster recovery processes for in-scope systems.

Benefits

• Medical, dental, and vision coverage.
• 401(k) with employer match.
• Life and long-term disability coverage.
• HSA and FSA plans.
• Holidays and paid time off.
• Wellness program, including catered meals three times a week, lunch and learns, and an onsite gym.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level