At a Glance
- Tasks: Manage firmware and software lifecycle across diverse network environments with cutting-edge technologies.
- Company: Join a $13+ billion global tech leader with a startup mindset.
- Benefits: Enjoy competitive salary, hybrid work, and opportunities for professional growth.
- Other info: Be part of a collaborative team driving innovation and continuous improvement.
- Why this job: Make a real impact by enhancing network security and stability in a dynamic environment.
- Qualifications: 3-6 years in network engineering and strong problem-solving skills required.
The predicted salary is between 53204 - 65028 £ per year.
We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products. HCLTech is a globally recognized leader in the Tech and IT industry, but we’ve never forgotten the startup mindset that got us here.
ROLE SUMMARY
The L2 Senior Network Patch Management Engineer owns the firmware and software lifecycle across a multi-vendor network estate (LAN, WAN, data centre fabrics, firewalls, load balancers, and wireless). Responsibilities include risk assessment, automated patching workflows, vulnerability-led prioritisation, and cross-team co-ordination for zero-disruption maintenance. The role serves as an escalation point for L1 and leads continuous improvement of network patching practices.
KEY RESPONSIBILITIES
- Manage the firmware/software lifecycle for routers, switches, firewalls, load balancers, and wireless controllers across multi-vendor environments (Cisco, Juniper, Aruba, Palo Alto, F5, Fortinet).
- Assess vendor advisories (Cisco PSIRT, Juniper JSA, Palo Alto Security Advisories) and map CVEs to required upgrades; prioritise based on business impact and CVSS score.
- Develop and maintain device-specific patching runbooks including pre-check scripts, upgrade procedures, rollback steps, and post-validation checks.
- Automate network patch workflows using Ansible, Netmiko, NAPALM, or vendor APIs (Cisco NSO / DNA Centre).
- Lead maintenance window planning: impact analysis, rollback testing, stakeholder communication, and CAB submission.
- Oversee configuration backup integrity (RANCID / Oxidised / Cisco NSO) before every patching activity.
- Conduct structured rollback for failed upgrades; perform root cause analysis and document findings.
- Integrate network vulnerability data from Qualys / Tenable into the patch prioritisation workflow.
- Monitor network stability post-patching using NMS/IPAM tools (SolarWinds, NetBrain, Infoblox).
- Act as L2 escalation for L1 patch-related issues and routing/connectivity incidents.
- Produce patch compliance reports and present to network management and security teams.
- Drive patching SLA adherence: Critical vulnerabilities within 72 hours, High within 14 days.
TECHNICAL SKILLS
Senior Patch Management Engineer employer: HCLTech
HCLTech is an excellent employer for those looking to advance their careers in cloud and infrastructure migration. With a strong focus on professional development, employees benefit from competitive compensation and a collaborative work culture that encourages innovation and growth. Located in a dynamic environment, HCLTech offers unique opportunities to work on cutting-edge technology projects while ensuring a supportive atmosphere for personal and professional advancement.
