BigFix Engineer - Hybrid in Louisville, KY
Role details
Job location
Tech stack
Job description
We are looking for a seasoned BigFix Engineer to join our US-based endpoint management team. This role is responsible for delivering and managing enterprise-grade patch management and OS image deployment services using HCL BigFix. The engineer will ensure endpoint compliance, security patching hygiene, and seamless OS deployment across large-scale Windows environments, serving as a subject matter expert for BigFix Lifecycle and Patch operations., Patch Management:
-
Design, configure, and manage end-to-end patch management operations using HCL BigFix Patch across enterprise environments.
-
Develop and maintain custom Fixlets, Baselines, and Tasks for OS and third-party patch deployment.
-
Define and enforce patch policies, maintenance windows, and exception management processes across endpoint fleets.
-
Monitor and maintain high patch compliance rates across Windows 10/11, Windows Server, and Linux endpoints.
-
Perform patch testing, staging, and phased rollout across controlled deployment rings.
-
Troubleshoot failed patches, client-side installation errors, and relay-side distribution issues.
-
Generate patch compliance reports and dashboards using BigFix WebUI, REST API, and SQL-based queries.
-
Collaborate with security and vulnerability management teams to ensure timely remediation aligned with organizational SLAs.
-
Manage Microsoft Patch Tuesday cycles, out-of-band updates, and zero-day emergency patching scenarios. Image & OS Deployment Management:
-
Design and manage OS deployment workflows using the BigFix Lifecycle OSD (OS Deployment) module.
-
Build, maintain, and version-control Windows 10/11 master images aligned with organizational and compliance standards.
-
Configure and manage WinPE boot environments, task sequences, and deployment profiles within BigFix.
-
Integrate driver management, application layering, and post-deployment configuration into OSD workflows.
-
Support bare-metal deployments, OS refresh, and OS migration projects at enterprise scale.
-
Manage image capture, customization, and deployment through BigFix OSD profiles and multicast delivery.
-
Troubleshoot image deployment failures, driver conflicts, and post-imaging configuration issues.
-
Partner with application packaging teams to ensure software readiness within deployed images. Infrastructure & Client Management:
-
Manage BigFix Relay hierarchy, client health, and bandwidth optimization across geographically distributed US sites.
-
Monitor BigFix Root Server and Relay performance, ensuring replication and content delivery health.
-
Develop PowerShell, Batch, and BigFix Action Script automations to support patch and imaging workflows.
-
Write BigFix Relevance expressions for endpoint targeting, inventory gathering, and compliance validation.
-
Conduct regular BigFix infrastructure maintenance, cleanup, and version upgrade activities.
-
Handle L2/L3 escalations for patch and imaging incidents, performing root cause analysis and resolution.
-
Support on-call operations for critical patching events and Sev 1/2 incident response. Secondary Platform Support
-
Working knowledge of SCCM / Microsoft Intune for co-existence and hybrid patch management scenarios.
-
Support integration between BigFix and SCCM/Intune where required for transition or co-managed environments.
Requirements
- 3-5 years of experience with HCL BigFix, specifically in patch management, software distribution, and OS deployment
- Proven experience managing large-scale Windows environments (Windows 10/11, Windows Server)
- Experience designing and managing end-to-end patch management operations using HCL BigFix Patch
- Experience with BigFix Lifecycle OSD module for OS deployment
Highly Preferred Skills:
- Digital Workplace Services experience
- Ability to collaborate with security and vulnerability management teams to meet SLAs
- Effective communication skills to handle L2/L3 escalations and root cause analysis
- Working knowledge of SCCM and Microsoft Intune for hybrid patch management scenarios
- Experience supporting integration between BigFix and SCCM/Intune
- Experience with REST API for advanced reporting and automation
- Knowledge of application layering and post-deployment configuration in OSD workflows
- Experience in a similar role within a large enterprise or managed services environment
- Experience leading or contributing to OS migration projects or large-scale deployment initiatives
- Ability to write and debug BigFix Relevance expressions and Action Scripts
- Familiarity with SQL-based query generation for reporting and dashboard creation
- Experience troubleshooting image deployment failures and driver conflicts
- Experience managing BigFix Relay hierarchy, client health, and bandwidth optimization
- Familiarity with PowerShell, Batch scripting, and automation of workflows
- Willingness to support on-call operations for critical patching events and incident responses
- Relevant certifications in BigFix or endpoint management (e.g., BigFix Certified Professional)
#INDICS