JOB DESCRIPTION
The Big Picture
Sysco LABS is the Global In-House Center of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco ranks 56th in the Fortune 500 list and is the global leader in the trillion-dollar foodservice industry.
Sysco employs over 75,000 associates, has 337 smart distribution facilities worldwide and over 14,000 IoT-enabled trucks serving 730,000 customer locations. For fiscal year 2025 that ended June 29, 2025, the company generated sales of more than $81.4 billion.
Sysco LABS Sri Lanka delivers the technology that powers Sysco’s end-to-end operations.
Sysco LABS’ enterprise technology is present in the end-to-end foodservice journey, enabling the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network and the in-restaurant dining experience of the end-customer.
Location:Sri Lanka
Employment Type:Full-Time
Department:Patching Operations
Title :SeniorEngineer – Patch Operations(Windows / Linux)
Experience Level:3-5Years
About the Role
We areseekinga highly motivatedSenior Engineerto joinour PatchOperations team. The successful candidate willbe responsible formaintainingoperating system security compliance through vulnerability remediation, patch deployment, and platform lifecycle management across a large-scale hybrid infrastructure.
The role supports Windows and Linux server environments hosted across on-premises and multi-cloud platforms, ensuring security vulnerabilities are remediated within defined SLA timelines whilemaintainingplatform stability and availability.
Our Environment
Enterprise-scale Windows and Linux server infrastructure
Multi-Cloud Platforms: AWS, Microsoft Azure, Google Cloud Platform (GCP)
Virtualization Platforms: Nutanix AHV and VMware vSphere
Patch Management Platform: Tanium
Vulnerability Management Tools: Qualys, Tenable, Rapid7, or equivalent
Infrastructure Automation: PowerShell, Bash, Ansible, Terraform
ITSM Platform: ServiceNow
Global 24x7 Operations Environment
Key Responsibilities
Patch Management & Remediation
Deploy monthly operating system security patches across WindowsandLinux server environments.
Utilize Tanium to schedule, deploy,monitor, andvalidatepatch compliance activities.
Coordinate emergency and Zero-Day vulnerability remediation activities.
Perform vulnerability remediationin accordance withorganizational security policies and SLAs.
Validate successful installation of patches and security updates.
Investigate and resolve failed patch deployments.
Vulnerability Management
Analyze vulnerability reports and prioritize remediation activities based on risk ratings.
Collaborate with Cyber Security teams to address critical and high-risk vulnerabilities.
Track remediation progress andmaintaincompliance reporting.
Infrastructure Operations
Support Windows Server (2012, 2016, 2019, 2022) and Linux (RHEL, Rocky, Ubuntu, Amazon Linux) environments.
Coordinate patching activities across Nutanix, VMware, AWS, Azure, and GCP hosted workloads.
Participate in maintenance windows and change management activities.
Support server lifecycle management activities including build, migration, and decommissioning.
TroubleshootOS-related issues resulting from patch deployments.
Automation & Reporting
Develop andmaintainPowerShell and Bash scripts to automate operational tasks.
Create andmaintainpatch compliance dashboards andreportingmetrics.
Contribute to infrastructure automation initiatives.
Identifyopportunities to improve patching efficiency and reduce manual effort.
Operational Excellence
Participate in patch planning, scheduling, and execution meetings.
Coordinate with application owners, infrastructure teams, and business stakeholders.
Maintain operational documentation, runbooks, and standard operating procedures.
Support audit and compliance requirements related to security patching.
Required Skills & Experience
Technical Skills
Experience managing WindowsorLinux server environments.
Experience using enterprise patch management solutions such as Tanium, SCCM, BigFix, or equivalent.
Understanding ofvulnerability management and remediation processes.
Knowledge of Windows UpdateorLinux package management, and security patching practices.
Familiarity with VMware vSphere and Nutanix AHV platforms.
Understanding ofAWS, Azure, and GCP infrastructure concepts.
Experience with PowerShell and Bash scripting.
Knowledge of Active Directory and Windows Server administration(Windows Engineers).
Understanding ofnetworking fundamentals (DNS, TCP/IP, Firewall, Load Balancing).
Operational Skills
Experience working in enterprise IT operations environments.
Understanding ofChange Management and ITIL processes.
Ability to troubleshoot complex patching and vulnerability issues.
Strong analytical and problem-solving skills.
Excellent communication and stakeholder management abilities.
Preferred Qualifications
Bachelor’s degree in computer science, IT, or related field.
Experience with Tanium Patch Managementor any other patching tool.
Experience with vulnerability management tools such as Qualys, Tenable, Rapid7, or Nessuswould be an added advantage.
Familiarity with Azure Update Manager and AWS Systems Manager Patch Manager.
Experience supporting enterprise environments with 1,000+ serverswould be an added advantage.
Microsoft, AWS, Azure, or GCP certifications(for Windows Engineers).
Red Hat, AWS, Azure, or GCP certifications(for Linux Engineers)
Benefits
Performance-based annual bonus
Performance rewards and recognition
Agile Benefits - special allowances for Health, Wellness & Academic purposes
Paid birthday leave Team engagement allowance
Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws
Hybrid work arrangement
Sysco LABS is an Equal Opportunity Employer.