Substrate PAVC Engineer

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Assist in the monthly rollout of Windows security patches, which includes both official and prerelease updates, Defender updates, .NET updates, and associated security and compliance components.

• Utilize PowerShell scripts and automation tools to facilitate patch deployment, investigation, remediation, and reporting processes.

• Employ KQL in Kusto to analyze deployment results, detect patterns and failures, and oversee patch and vulnerability compliance.

• Diagnose issues related to failed Windows updates and MSU installations through Event Viewer, CBS and installer logs, error codes, and other diagnostic data.

• Determine installed patches and operating system status using Get-HotFix, Get-WindowsPackage, DISM, Get-ComputerInfo, and Windows Update history.

• Develop, validate, and distribute patching components and packages while adhering to Safe Deployment Practices across various deployment rings and environments.

• Investigate and resolve deployment delays caused by installation failures, machine states, capacity limitations, network challenges, or environment-specific obstacles.

• Maintain dashboards, monitoring systems, compliance reports, and status updates for engineering, security, and compliance stakeholders.

• Collaborate with partner teams to address exceptions, blockers, manual interventions, and environment-specific patching needs.

⛳️ Requirements

• Practical experience with PowerShell scripting and automation, including a solid understanding of PowerShell’s object-based pipeline and Where-Object filtering.

• Practical experience using KQL to query and troubleshoot data within Kusto.

• Knowledge of Windows servicing and enterprise update strategies, including Windows Update or Microsoft Update, WSUS, and manual MSU installations.

• Strong troubleshooting abilities related to Windows updates, patch installations, and deployment issues.

• Capability to review pertinent logs, investigate error codes, and establish suitable next steps.

• Experience in identifying installed patches, packages, runtime versions, and operating system status using PowerShell, DISM, or equivalent tools.

• Excellent communication skills and the ability to work collaboratively with engineering, security, and compliance teams.

• Preferred: experience with Azure DevOps build or deployment pipelines.

• Preferred: experience with .NET tooling and identifying installed .NET Core runtimes.

• Preferred: familiarity with Defender servicing and vulnerability scanning tools such as Qualys or AzSecPack.

• Preferred: knowledge of mapping CVEs to patch or vulnerability remediation workflows.

• Preferred: understanding of Windows Server 2025 hotpatching, operating system baselines, STIGs, WinPE, or Safe Deployment Practices.

• Preferred: experience in supporting patch compliance or troubleshooting in a large, distributed server environment.

🏝️ Benefits

• Medical, dental, and vision coverage.

• Flexible Spending Account (FSA).

• 401(k) retirement plan.

• Competitive paid time off.

• Parental leave.

• Opportunities for professional growth and development.

• Statutory benefits and additional payments as required by Brazilian law.