Substrate PAVC Engineer
About the role
About Blueprint
Blueprint is a technology solutions firm headquartered in Bellevue, Washington, with teams across the United States. We help organizations turn complex challenges into meaningful outcomes by connecting strategy and execution across AI, cloud, data, product development, and emerging technology.
At Blueprint, you’ll work alongside talented people with different experiences, expertise, and perspectives. You’ll have opportunities to take on meaningful challenges, expand your skills, and see the impact of what you build.
About the Role
The Substrate PAVC Engineer supports patching, antivirus, and vulnerability compliance across Microsoft Substrate environments. This role focuses on Windows servicing, PowerShell automation, Kusto Query Language analysis, and troubleshooting patch deployment failures across a large server fleet.
You’ll help deliver Windows security patches, Defender platform and signature updates, .NET updates, and vulnerability remediation activities safely and consistently. You’ll collaborate with engineering, security, and compliance teams to investigate deployment issues, maintain compliance, and resolve technical blockers.
What You'll Do
- Support monthly Windows security patch rollouts, including official and prerelease updates, Defender updates, .NET updates, and related security and compliance components.
- Use PowerShell scripts and automation to support patch deployment, investigation, remediation, and reporting workflows.
- Use KQL in Kusto to investigate deployment results, identify patterns and failures, and monitor patch and vulnerability compliance.
- Troubleshoot failed Windows updates and MSU installations using Event Viewer, CBS and installer logs, error codes, and other relevant diagnostic information.
- Identify installed patches and operating system status using tools such as Get-HotFix, Get-WindowsPackage, DISM, Get-ComputerInfo, and Windows Update history.