SonicJobs Logo
Left arrow iconBack to search

Enterprise Infrastructure Patch and Security Engineer

All Lines Technology
Posted a month ago, valid for 24 days
Location

Hermitage, PA, US

Salary

Competitive

Contract type

Full Time

By applying, a Sonicjobs account will be created for you. Sonicjobs's Privacy Policy and Terms & Conditions will apply.

SonicJobs' Terms & Conditions and Privacy Policy also apply.

Sonic Summary

info
  • The role focuses on reducing security risk and maintaining patch compliance across Infrastructure Services using approved tools and processes.
  • Key responsibilities include managing the Security Remediation Program, executing monthly OS patching, and running zero-day patching with expedited assessments.
  • Candidates should have over 5 years of experience in infrastructure security and patch management, particularly with Windows Server and Enterprise Linux.
  • Hands-on experience with various tools such as MECM/SCCM, Ansible, and Rapid7 is required, along with strong skills in ITIL change management and compliance reporting.
  • The position offers a competitive salary of $100,000 per year.
Purpose of this role
Reduce security risk and maintain patch compliance across Infrastructure Services using approved tooling and processes (Windows Server, Enterprise Linux, cloud/on‑prem, network devices, and assets in scope).

What You’ll Do
  • Own Security Remediation Program management aligned to Security’s findings (Critical/High/Medium).
  • Plan, schedule, and execute monthly OS patching (Windows/Linux) with canaries, maintenance windows, and rollback.
  • Run zero-day/out‑of‑band patching with expedited assessment and change controls.
  • Deliver extended remediations (cipher/protocol, file rights, 3rd‑party updates) and coordinate vendor engagement.
  • Operate tooling: MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi; perform manual deployments where required.
  • Manage quarterly component updates and certificate lifecycle (PKI/DigiCert), including self‑signed to PKI migration feasibility.
  • Publish compliance reports, audit artifacts, and governance updates; chair weekly Security–Infrastructure standups.

What You’ll Bring
  • 5+ years in infrastructure security/patch management across Windows Server & Enterprise Linux (RHEL/others).
  • Hands‑on experience with MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi/PKI.
  • Strong ITIL change & incident management, CMDB updates, compliance reporting.
  • Scripting skills (PowerShell/Bash/Python), canary strategies, rollback procedures.
  • Nice‑to‑have: ITIL v4, Security+, RHCSA/RHCE, Microsoft Certified, CCNA/CCNP, GIAC/GVM.



Learn more about this Employer on their Career Site

Apply now in a few quick clicks

By applying, a Sonicjobs account will be created for you. Sonicjobs's Privacy Policy and Terms & Conditions will apply.

SonicJobs' Terms & Conditions and Privacy Policy also apply.