The Big Picture
Sysco LABS is the Global In-House Center of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco ranks 56th in the Fortune 500 list and is the global leader in the trillion-dollar foodservice industry.
Sysco employs over 75,000 associates, has 337 smart distribution facilities worldwide and over 14,000 IoT-enabled trucks serving 730,000 customer locations. For fiscal year 2025 that ended June 29, 2025, the company generated sales of more than $81.4 billion.
Sysco LABS Sri Lanka delivers the technology that powers Sysco’s end-to-end operations.
Sysco LABS’ enterprise technology is present in the end-to-end foodservice journey, enabling the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network and the in-restaurant dining experience of the end-customer.
Location: Sri Lanka
Employment Type: Full-Time
Department: Patching Operations
Title : Engineer – Patch Operations (Windows / Linux)
Experience Level: 1-3 Years
About the Role
We are seeking a highly motivated Engineer to join our Patch Operations team. The successful candidate will be responsible for maintaining operating system security compliance through vulnerability remediation, patch deployment, and platform lifecycle management across a large-scale hybrid infrastructure.
The role supports Windows and Linux server environments hosted across on-premises and multi-cloud platforms, ensuring security vulnerabilities are remediated within defined SLA timelines while maintaining platform stability and availability.
Our Environment
Enterprise-scale Windows and Linux server infrastructure
Multi-Cloud Platforms: AWS, Microsoft Azure, Google Cloud Platform (GCP)
Virtualization Platforms: Nutanix AHV and VMware vSphere
Patch Management Platform: Tanium
Vulnerability Management Tools: Qualys, Tenable, Rapid7, or equivalent
Infrastructure Automation: PowerShell, Bash, Ansible, Terraform
ITSM Platform: ServiceNow
Global 24x7 Operations Environment
Key Responsibilities
Patch Management & Remediation
Deploy monthly operating system security patches across Windows and Linux server environments.
Utilize Tanium to schedule, deploy, monitor, and validate patch compliance activities.
Coordinate emergency and Zero-Day vulnerability remediation activities.
Perform vulnerability remediation in accordance with organizational security policies and SLAs.
Validate successful installation of patches and security updates.
Investigate and resolve failed patch deployments.
Vulnerability Management
Analyze vulnerability reports and prioritize remediation activities based on risk ratings.
Collaborate with Cyber Security teams to address critical and high-risk vulnerabilities.
Track remediation progress and maintain compliance reporting.
Infrastructure Operations
Support Windows Server (2012, 2016, 2019, 2022) and Linux (RHEL, Rocky, Ubuntu, Amazon Linux) environments.
Coordinate patching activities across Nutanix, VMware, AWS, Azure, and GCP hosted workloads.
Participate in maintenance windows and change management activities.
Support server lifecycle management activities including build, migration, and decommissioning.
Troubleshoot OS-related issues resulting from patch deployments.
Automation & Reporting
Develop and maintain PowerShell and Bash scripts to automate operational tasks.
Create and maintain patch compliance dashboards and reporting metrics.
Contribute to infrastructure automation initiatives.
Identify opportunities to improve patching efficiency and reduce manual effort.
Operational Excellence
Participate in patch planning, scheduling, and execution meetings.
Coordinate with application owners, infrastructure teams, and business stakeholders.
Maintain operational documentation, runbooks, and standard operating procedures.
Support audit and compliance requirements related to security patching.
Required Skills & Experience
Technical Skills
Experience managing Windows or Linux server environments.
Experience using enterprise patch management solutions such as Tanium, SCCM, BigFix, or equivalent.
Understanding of vulnerability management and remediation processes.
Knowledge of Windows Update or Linux package management, and security patching practices.
Familiarity with VMware vSphere and Nutanix AHV platforms.
Understanding of AWS, Azure, and GCP infrastructure concepts.
Experience with PowerShell and Bash scripting.
Knowledge of Active Directory and Windows Server administration (Windows Engineers).
Understanding of networking fundamentals (DNS, TCP/IP, Firewall, Load Balancing).
Operational Skills
Experience working in enterprise IT operations environments.
Understanding of Change Management and ITIL processes.
Ability to troubleshoot complex patching and vulnerability issues.
Strong analytical and problem-solving skills.
Excellent communication and stakeholder management abilities.
Preferred Qualifications
Bachelor’s degree in computer science, IT, or related field.
Experience with Tanium Patch Management or any other patching tool.
Experience with vulnerability management tools such as Qualys, Tenable, Rapid7, or Nessus would be an added advantage.
Familiarity with Azure Update Manager and AWS Systems Manager Patch Manager.
Experience supporting enterprise environments with 1,000+ servers would be an added advantage.
Microsoft, AWS, Azure, or GCP certifications (for Windows Engineers).
Red Hat, AWS, Azure, or GCP certifications (for Linux Engineers)
Benefits
Performance-based annual bonus
Performance rewards and recognition
Agile Benefits - special allowances for Health, Wellness & Academic purposes
Paid birthday leave Team engagement allowance
Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws
Hybrid work arrangement
Sysco LABS is an Equal Opportunity Employer.
