System Engineer - Industrial Patch Management & OT Infrastructure

Company Overview

REPLIL specializes in cybersecurity and infrastructure management solutions tailored for industrial and operational technology (OT) environments. Their leading platform, REPLIL Industrial Patch Manager (IPM), offers centralized patch and vulnerability management across diverse industrial systems. This solution enables organizations to identify, assess, approve, deploy, and monitor updates for operating systems, software, firmware, and vendor-certified patches spanning IT and OT infrastructure. Technologies supported include providers like Microsoft, Cisco, Palo Alto Networks, Honeywell, Yokogawa, Schneider Electric, Emerson, Rockwell Automation, among others. It also integrates vulnerability data from sources such as the NIST National Vulnerability Database (NVD).

Role Summary

The System Engineer will be responsible for implementing, configuring, maintaining, and troubleshooting the REPLIL Industrial Patch Manager platform and its associated infrastructure at customer sites in Saudi Arabia. The position requires hands-on expertise with Windows Server, patch management tools, networking, firewalls, remote management protocols, and enterprise-grade infrastructure. Experience with OT or industrial environments is advantageous, though candidates with strong IT infrastructure and patch management skills who are eager to build OT knowledge are encouraged to apply.

Key Duties

• Deploy, configure, manage, and resolve issues related to REPLIL Industrial Patch Manager and its components.
• Administer and troubleshoot Windows Server environments.
• Set up and support Microsoft patch management technologies, such as WSUS, SCCM/MECM, and Windows Update.
• Oversee the full patch management lifecycle, including discovery, applicability assessment, testing, approval, deployment scheduling, reboot coordination, installation verification, failure diagnosis, remediation, compliance, and reporting.
• Analyze patch failures via Windows and application logs.
• Manage and troubleshoot network connectivity among distributed systems.
• Handle firewalls, switches, routers, VLANs, ports, routing, DNS, certificates, and security policies.
• Troubleshoot remote-management protocols including WinRM/PowerShell Remoting, WMI, SSH, SNMP, HTTPS/TLS, and RDP.
• Monitor system uptime, performance metrics, services, logs, and overall infrastructure health.
• Support patching and management for Windows, Linux, various applications, and networking hardware.
• Provide technical assistance and root-cause analysis to customers and internal teams.
• Create technical documentation, deploy instructions, troubleshooting guides, and customer reports.
• Engage in system design reviews, testing, site acceptance testing, implementation, and customer handover processes.
• Collaborate closely with product, engineering, cybersecurity, and R&D teams at REPLIL.

Required Qualifications

• At least 3 years of practical experience in system engineering, system administration, infrastructure support, or related roles.
• Solid grasp of enterprise patch management.
• Strong hands-on experience in Windows Server administration.
• Proficiency with Microsoft patch management tools such as WSUS, SCCM/MECM, and Windows Update.
• In-depth knowledge of Windows patching processes, servicing, cumulative and security updates, prerequisites, reboot requirements, and troubleshooting patch failures.
• Experience with Active Directory, Group Policy, DNS, certificates, Windows services, Task Scheduler, and PowerShell scripting.
• Strong understanding of TCP/IP networking, including ports, routing, VLANs, DNS, and firewall configurations.
• Hands-on troubleshooting of firewalls and various network devices.
• Excellent problem-solving skills with systematic approaches to diagnosing infrastructure, OS, application, and network issues.
• Effective communication skills for technical issue explanation to customers and internal teams.
• Bachelor's degree or equivalent experience in Computer Engineering, Electrical Engineering, IT, Computer Science, or related fields.

Preferred Skills

• Experience in OT/ICS and industrial control systems.
• Knowledge of IT/OT network architectures and segmentation.
• Familiarity with industrial cybersecurity.
• Linux system administration and patching experience.
• Technical knowledge of Cisco, Juniper, Palo Alto Networks, Fortinet, or similar hardware.
• Experience with virtualization technologies like VMware.
• Understanding of SNMP and network device management.
• Firmware and network-device upgrade management.
• Vulnerability management concepts including CVE and CVSS.
• Exposure to NIST NVD or other vulnerability intelligence databases.
• PowerShell scripting and automation capabilities.
• SQL or PostgreSQL database experience.
• IIS and .NET application hosting knowledge.
• Experience working with air-gapped or restricted industrial networks.
• Familiarity with industrial vendors such as Honeywell, Siemens, Schneider Electric, Emerson, Rockwell Automation, Yokogawa, or related platforms.

Desired Traits and Problem-Solving Focus

• Ability to identify reasons behind Windows patch failures and locate relevant logs.
• Understanding of how WSUS and Windows Update determine applicable patches.
• Capability to troubleshoot communication issues over WinRM.
• Knowledge of required firewall ports and protocols between infrastructure components.
• Skill in deploying patches safely across production systems.
• Ability to distinguish issues related to network, authentication, OS, applications, or patching.
• Experience managing patching in isolated or restricted network environments.

Career Development and Exposure

This role presents a unique chance to gain expertise extending beyond traditional IT infrastructure into industrial and OT environments. Engineers will receive training and hands-on experience with critical infrastructure, working with technologies and equipment from multiple vendors, including Cisco, Juniper, Palo Alto Networks, Extreme Networks, OWL, Microsoft, industrial PLCs, network devices, and OT/ICS systems. Exposure will encompass areas such as industrial cybersecurity, IT/OT integration, enterprise and industrial patch management, Windows and Linux infrastructure, network and firewall technologies, firmware and device management, vulnerability management, industrial protocols, critical infrastructure environments, and automation troubleshooting. Those looking to transition from classical system administration into OT/ICS infrastructure and cybersecurity will find substantial growth opportunities here.