Vulnerability Management – IBM OS/390 Patch Deployment Administrator

Role Summary

The Vulnerability Management Patch Deployment Administrator is responsible for deploying, validating, and maintaining security patches and configuration updates across enterprise systems to remediate identified vulnerabilities. This role works closely with Vulnerability Management, Infrastructure, Cloud, and Application teams to ensure timely, reliable, and compliant patching while minimizing business disruption.

Key Responsibilities Patch Deployment C Remediation

Maintenance s Patching: Plan, test, and implement IBM OS/390 and z/OS maintenance, including quarterly or monthly Preventive Service Planning (PSP) buckets, Recommended Service Upgrades (RSU), and critical security patches.

SMP/E Management: Use SMP/E to receive, apply, and accept PTFs, APARs, and PTF fixes to maintain system currency.

System Testing s Validation: Perform IPL (Initial Program Load) of operating systems to apply maintenance, ensuring minimal disruption to business-critical applications.

OS/3G0 s z/OS Knowledge: Deep understanding of MVS/ESA SP6 and later, including system libraries and datasets.

SMP/E Proficiency: Strong expertise in SMP/E commands and troubleshooting SMP/E errors.

Job Control Language (JCL): Expert skills in writing and modifying JCL for maintenance tasks.

Establish and articulate a strategic security plan consistent with the vision and goals of the enterprise.

Secure adequate resources and budget for vulnerability management team responsibilities and related projects.

Provide regular updates on the key security indicators and any significant security occurrences to the key decision-makers and the board of directors.

Ensure that risk management frameworks are incorporated into the routine security processes.

Deploy security patches for Windows and Linux servers, endpoints, and infrastructure devices.

Execute patch deployments using enterprise patching and automation tools.

Apply emergency (out-of-band) patches for critical and actively exploited vulnerabilities.

Perform post-deployment validation to confirm successful remediation.

Vulnerability Remediation Support

Consume vulnerability scan results and create remediation tickets.

Map vulnerabilities to applicable patches, configuration changes, or compensating controls.

Coordinate with Vulnerability Management teams to confirm vulnerability closure.

Testing, Change C Stability

Test patches in non-production environments prior to deployment.

Follow change management and maintenance window processes.

Develop and Perform rollback procedures when required to restore system stability.

Document patch exceptions and risk acceptances.

Scheduling C Operational Execution

Manage patch schedules and deployment waves across environments on Windows and Linux System

Ensure patching aligns with defined SLAs and business availability requirements.

Coordinate downtime notifications with system owners.

Reporting C Compliance

Track patch deployment status, failures, and success rates.

Maintain documentation for patched and unpatched systems.

Create and maintain vulnerability management reports

Support audits and compliance by providing patch evidence and reports.

Required Qualifications

5+ years of experience in patch management, system administration, or IT operations.

Hands-on experience deploying patches in Large enterprise environments.

Strong knowledge of Windows Server and Linux operating systems.

Familiarity with vulnerability management workflows.

Preferred Qualifications

Experience with SCCM/MECM, Intune or automation tools.

Experience with Rapid7 or similar patching solutions.

Understanding of NIST, CIS, or ISO 27001 frameworks.

Relevant technical or security certifications.

What Success Looks Like

High patch deployment success rates with minimal operational impact.

Consistent achievement of patching SLAs.

Reduced backlog of exploitable vulnerabilities.

Strong audit readiness and documentation.