SonicJobs Logo
Left arrow iconBack to search

Enterprise Infrastructure Patch and Security Engineer

All Lines Technology
Posted 22 days ago, valid for 17 days
Location

Hermitage, PA, US

Salary

Competitive

Contract type

Full Time

By applying, a Sonicjobs account will be created for you. Sonicjobs's Privacy Policy and Terms & Conditions will apply.

SonicJobs' Terms & Conditions and Privacy Policy also apply.

Sonic Summary

info
  • The role focuses on reducing security risk and maintaining patch compliance across Infrastructure Services using approved tools and processes.
  • Key responsibilities include managing the Security Remediation Program, executing monthly OS patching, and running zero-day patching with expedited assessments.
  • Candidates should have over 5 years of experience in infrastructure security and patch management, particularly with Windows Server and Enterprise Linux.
  • Hands-on experience with various tools such as MECM/SCCM, Ansible, and Rapid7 is required, along with strong skills in ITIL change management and compliance reporting.
  • The position offers a competitive salary of $100,000 per year.
Purpose of this role
Reduce security risk and maintain patch compliance across Infrastructure Services using approved tooling and processes (Windows Server, Enterprise Linux, cloud/on‑prem, network devices, and assets in scope).

What You’ll Do
  • Own Security Remediation Program management aligned to Security’s findings (Critical/High/Medium).
  • Plan, schedule, and execute monthly OS patching (Windows/Linux) with canaries, maintenance windows, and rollback.
  • Run zero-day/out‑of‑band patching with expedited assessment and change controls.
  • Deliver extended remediations (cipher/protocol, file rights, 3rd‑party updates) and coordinate vendor engagement.
  • Operate tooling: MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi; perform manual deployments where required.
  • Manage quarterly component updates and certificate lifecycle (PKI/DigiCert), including self‑signed to PKI migration feasibility.
  • Publish compliance reports, audit artifacts, and governance updates; chair weekly Security–Infrastructure standups.

What You’ll Bring
  • 5+ years in infrastructure security/patch management across Windows Server & Enterprise Linux (RHEL/others).
  • Hands‑on experience with MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi/PKI.
  • Strong ITIL change & incident management, CMDB updates, compliance reporting.
  • Scripting skills (PowerShell/Bash/Python), canary strategies, rollback procedures.
  • Nice‑to‑have: ITIL v4, Security+, RHCSA/RHCE, Microsoft Certified, CCNA/CCNP, GIAC/GVM.



Learn more about this Employer on their Career Site

Apply now in a few quick clicks

By applying, a Sonicjobs account will be created for you. Sonicjobs's Privacy Policy and Terms & Conditions will apply.

SonicJobs' Terms & Conditions and Privacy Policy also apply.