Upgrade and Patch Management Specialist

ORNL Federal Credit Union • Oak Ridge, TN

4d

About The Position

The Upgrade and Patch Management Specialist is responsible for end-to-end coordination, implementation, and documentation of all upgrades and patching activities across ORNL FCU’s infrastructure. This includes planning and executing patch schedules, snapshots, software upgrades, and ensuring version control across platform types—whether physical or virtualized (e.g., Hyper-V, VMware, or Citrix). This role plays a critical part in keeping systems current, secure, and compliant with regulatory standards including NIST, GLBA, NCUA, and FFIEC. Focused on maintaining an effective and auditable patch management and update program.

Requirements

• Four or more years of experience in enterprise upgrade and patch management, including both server and desktop infrastructure environments.
• Hands-on experience with virtualization platforms such as VMware, Citrix, or Microsoft Hyper-V, including patching and updating guest OS images
• Familiarity with OS lifecycle management, software compatibility testing, and compliance documentation
• Understanding of patch documentation and audit activity within regulated environments, such as financial institutions
• Bachelor’s degree in Information Systems, Computer Science, or a closely related field or equivalent combination of education, training, experience, or military experience.
• Ability to manage multiple concurrent patch cycles and upgrade routines across diverse system environments
• Proactive and detail-oriented with strong documentation and change control practices
• Comfortable with off-hours work during scheduled maintenance windows to complete patch rollouts or upgrades

Nice To Haves

• CompTIA Server+
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• VMware Certified Professional – Desktop and Mobility
• Citrix Certified Associate – Virtualization

Responsibilities

• Patch Management & Lifecycle: Manages the complete patch lifecycle for servers, enterprise software, and desktop platforms, including evaluation, scheduling, testing, deployment, and rollback documentation.
• Creates, manages, and maintains patch calendars and endpoint version documentation for internal tracking and external audit readiness.
• Ensures all patching and upgrade activities align with frameworks from NIST (SP 800-40), NCUA, FFIEC, and GLBA regulations.
• Reports patch compliance metrics and prepare evidence to support audits, risk assessments, and security examinations.
• Evaluation & Upgrade Execution: Evaluates vendor release notes and bulletins to identify security patches, OS updates, and version upgrades appropriate for enterprise infrastructure.
• Executes OS and application upgrades on both physical and virtual systems, ensuring minimal disruption and full compatibility.
• Help track network/security and misc. equipment patching.
• Part of an on-call and response team.
• Virtual Desktop & Endpoint Maintenance: Maintains and applies updates to virtual desktop environments, including base image management and endpoint OS patching.
• Collaboration & Impact Mitigation: Collaborates with IT teams and business units to ensure updates do not interfere with user productivity or application functionality.
• Performs other job-related duties as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level