As the Architect for Cloud Security Operations & Patching at Honeywell, you will be responsible for leading enterprise-wide cloud patching and vulnerability remediation programs across Azure, AWS, GCP, and hybrid infrastructure environments. This role will own the governance, execution, reporting, and continuous improvement of cloud patch management processes while ensuring security tool health, deployment, and operational effectiveness.
The position serves as the primary point of coordination between infrastructure teams, cloud operations, cybersecurity, application owners, business stakeholders, and managed service providers to ensure timely remediation of vulnerabilities, compliance with corporate security policies, and maintenance of an accurate CMDB within ServiceNow.
This role requires strong technical expertise, operational discipline, stakeholder management skills, and the ability to drive remediation activities across a large and complex global cloud ecosystem.
Patch Management Program Leadership
- Own and manage Honeywell's cloud and infrastructure patch management process across AWS, Azure, GCP, and hybrid environments.
- Establish and maintain patching standards, governance, maintenance schedules, and operational procedures.
- Plan, coordinate, and execute monthly, quarterly, and emergency patching activities.
- Ensure critical and high-risk vulnerabilities are remediated within established SLA timelines.
- Coordinate patching activities across multiple business units and technology teams.
- Drive continuous improvements in patch compliance, automation, and operational efficiency.
Vulnerability Remediation Management
- Partner with Cyber Security teams to prioritize and remediate vulnerabilities identified through enterprise security tools.
- Track vulnerability remediation progress and escalate aging findings to appropriate stakeholders.
- Manage remediation efforts for operating systems, cloud services, middleware, databases, and infrastructure platforms.
- Conduct risk assessments and support mitigation planning for vulnerabilities that cannot be immediately remediated.
- Ensure adherence to internal cybersecurity requirements and regulatory compliance standards.
Security Tool Deployment and Operations
- Lead deployment, onboarding, configuration, and ongoing maintenance of cloud security and vulnerability management platforms.
- Ensure enterprise security tools are properly installed, operational, and reporting accurately across all cloud environments.
- Monitor tool coverage, agent health, and platform effectiveness.
- Partner with platform owners and vendors to troubleshoot security tool issues and implement enhancements.
- Develop processes to improve visibility and reduce blind spots across the enterprise cloud estate.
CMDB and Asset Compliance (ServiceNow)
- Drive CMDB accuracy, completeness, and compliance within ServiceNow.
- Establish controls to ensure cloud assets are properly discovered, classified, and maintained.
- Coordinate with asset owners and infrastructure teams to resolve CMDB discrepancies.
- Implement governance processes to improve data quality and configuration management practices.
- Support audits and compliance reviews through accurate asset and configuration tracking.
- Ensure cloud resources are aligned with enterprise inventory management standards.
Reporting, Metrics, and Executive Communication
- Develop and maintain dashboards and KPI reporting for patch compliance, vulnerability remediation, CMDB health, and security tool coverage.
- Provide weekly and monthly status reporting to senior leadership.
- Track patching performance against defined SLAs and operational targets.
- Identify trends, recurring issues, and opportunities for risk reduction.
- Prepare executive-level summaries highlighting compliance status, remediation progress, and outstanding risks.
Weekend and Maintenance Window Coordination
- Lead planning and coordination of scheduled maintenance activities, including weekend patching events.
- Coordinate activities across infrastructure, cloud operations, cybersecurity, networking, and application support teams.
- Manage stakeholder communications before, during, and after maintenance windows.
- Ensure appropriate testing, validation, rollback planning, and post-maintenance verification.
- Drive incident resolution should issues arise during patch deployments.
Automation and Continuous Improvement
- Identify opportunities to automate patch deployment, reporting, compliance tracking, and vulnerability remediation processes.
- Partner with engineering teams to implement Infrastructure as Code and automated remediation capabilities.
- Improve operational efficiency through workflow automation and standardized operating procedures.
- Evaluate emerging tools and technologies that enhance security posture and operational resilience.
- Contribute to enterprise cloud operations and cybersecurity strategy initiatives.
Stakeholder Management
- Collaborate with Cloud Engineering, Infrastructure Operations, Cybersecurity, Application Owners, Enterprise Architecture, and Compliance teams.
- Serve as a trusted advisor for vulnerability management and patch governance programs.
- Engage vendors and managed service providers to ensure service quality and operational excellence.
- Provide guidance and leadership during audits, compliance reviews, and security assessments.
- Communicate technical risks and remediation strategies to both technical and executive audiences.
- Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or related field.
- 8+ years of experience in Cloud Operations, Infrastructure Operations, Security Operations, or Vulnerability Management.
- 5+ years of experience managing enterprise patching and remediation programs.
- Strong experience with Azure, AWS, and GCP cloud environments.
- Deep understanding of operating systems, cloud infrastructure, networking, and security controls.
- Experience administering or supporting vulnerability management and security monitoring platforms.
- Strong analytical, communication, and stakeholder management skills.
- Experience leading cross-functional operational programs in large enterprise environments.
Preferred Technical Skills
- ServiceNow CMDB and Configuration Management
- Vulnerability Management Platforms (Tenable, Qualys, Rapid7, Microsoft Defender)
- Microsoft Endpoint Manager / Intune
- Azure Update Manager
- AWS Systems Manager Patch Manager
- Linux and Windows Server Administration
- PowerShell, Python, and Automation Scripting
- Infrastructure as Code (Terraform, Bicep, CloudFormation)
- Cloud Security Posture Management Solutions
- Monitoring and Reporting Platforms
Preferred Certifications
- Microsoft Certified: Azure Administrator Associate
- Microsoft Certified: Azure Solutions Architect Expert
- AWS Certified SysOps Administrator
- AWS Certified Solutions Architect
- Google Professional Cloud Engineer
- Certified Information Systems Security Professional (CISSP)
- Certified Cloud Security Professional (CCSP)
- ServiceNow Certified System Administrator
- ITIL Foundation Certification