Upgrade and Patch Management Specialist

The deadline to apply for this opportunity is October 8, 2025.

Role : The Upgrade and Patch Management Specialist is responsible for end-to-end coordination, implementation, and documentation of all upgrades and patching activities across ORNL FCU's infrastructure. This includes planning and executing patch schedules, snapshots, software upgrades, and ensuring version control across platform types-whether physical or virtualized (e.g., Hyper-V, VMware, or Citrix).

This role plays a critical part in keeping systems current, secure, and compliant with regulatory standards including NIST, GLBA, NCUA, and FFIEC. Focused on maintaining an effective and auditable patch management and update program.

Essential Functions and Responsibilities :

• Patch Management & Lifecycle : Manages the complete patch lifecycle for servers, enterprise software, and desktop platforms, including evaluation, scheduling, testing, deployment, and rollback documentation. Creates, manages, and maintains patch calendars and endpoint version documentation for internal tracking and external audit readiness. Ensures all patching and upgrade activities align with frameworks from NIST (SP 800-40), NCUA, FFIEC, and GLBA regulations. Reports patch compliance metrics and prepare evidence to support audits, risk assessments, and security examinations.
• Evaluation & Upgrade Execution : Evaluates vendor release notes and bulletins to identify security patches, OS updates, and version upgrades appropriate for enterprise infrastructure. Executes OS and application upgrades on both physical and virtual systems, ensuring minimal disruption and full compatibility. Help track network / security and misc. equipment patching. Part of an on-call and response team.
• Virtual Desktop & Endpoint Maintenance : Maintains and applies updates to virtual desktop environments, including base image management and endpoint OS patching.
• Collaboration & Impact Mitigation : Collaborates with IT teams and business units to ensure updates do not interfere with user productivity or application functionality.
• Performs other job-related duties as assigned.

Experience : Four or more years of experience in enterprise upgrade and patch management, including both server and desktop infrastructure environments.

Education : Bachelor's degree in Information Systems, Computer Science, or a closely related field or equivalent combination of education, training, experience, or military experience.

Preferred certifications include :

Other skills required :

Equal Opportunity Employer / Protected Veterans / Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.