Systems Engineer, Patch Management (12 month contract)

TMX Group; Toronto; On-site; CAD 152,000 - 165,000; Full time

Job summary

TMX Group is seeking a Systems Engineer for a 12‑month contract to architect, test, and deploy enterprise patching across hybrid platforms in Toronto. The role emphasizes automation, IaC, and Generative AI tooling to accelerate velocity while preserving security and uptime.

The ideal candidate has 5+ years in systems administration, deep patching experience with WSUS and RedHat Satellite, and strong cross‑platform expertise including Windows Server, Linux, and VMware.

Qualifications

• Degree or equivalent practical experience in computer science/engineering.
• 5+ years of progressive systems administration experience.
• Expert knowledge of enterprise patching tools WSUS and RedHat Satellite.
• Proven IaC and automation using Terraform and Ansible.
• Deep cross‑platform expertise: Windows Server, Linux (RedHat), VMware.
• Hands‑on observability with Splunk Observability/Cloud and Grafana.
• Experience applying Generative AI tools to optimize code and workflows.
• Strong analytical and executive communication skills.

Responsibilities

• Strategically assess vulnerabilities, threats, and critical fixes for infrastructure integrity.
• Orchestrate end‑to‑end patching across hybrid environments with minimal downtime.
• Lead pre‑deployment validation in staging to ensure production stability.
• Architect automated deployment frameworks using IaC to increase efficiency.
• Monitor compliance and patch efficacy; report insights to IT leadership and security stakeholders.
• Facilitate rapid incident response and resolve post‑deployment issues.
• Develop and maintain robust technical documentation and standards.

Skills

Automation

IaC

AI integration

Cross‑platform

Observability

Education

Bachelor's degree in Computer Science or Engineering

Tools

Terraform

Ansible

PowerShell

WSUS

RedHat Satellite

Splunk Observability

Grafana

Kubernetes

Job description

We are seeking a Systems Engineer to join our team for a 12‑month contract. In this role, you will architect, test, and execute enterprise‑wide software updates and security patches across diverse platforms, ensuring strict adherence to patching service‑level agreements (SLAs) while proactively driving process optimization. The ideal candidate brings a commitment to automation, programmatic solutions, and Infrastructure as Code (IaC) principles, and will leverage a strategic understanding of Platform Engineering and Generative AI tools (e.g., Copilot, Claude) to accelerate engineering velocity and elevate operational efficiency across our hybrid environment.

Job Location: Hybrid (2‑3 days in office) – based in Toronto, ON

Key Accountabilities

• Strategic Vulnerability Management: Proactively assess and prioritize system vulnerabilities, security threats, and critical bug fixes to safeguard enterprise infrastructure integrity.
• Lifecycle Patch Management: Orchestrate the end‑to‑end execution of OS and application‑level patching across hybrid environments, optimizing for service continuity and minimal operational impact.
• Quality Assurance & Validation: Lead rigorous pre‑deployment validation protocols in staging environments to certify patch compatibility and guarantee production stability.
• Automated Infrastructure Scaling: Architect and operationalize automated deployment frameworks, leveraging Infrastructure as Code (IaC) principles (e.g., PowerShell, Ansible) to drive efficiency and consistency across expansive, heterogeneous environments.
• Regulatory Compliance & Analytics: Monitor security compliance and patch efficacy, synthesizing complex technical data into actionable insights for IT leadership and security stakeholders.
• Operational Resilience & Incident Response: Facilitate rapid incident response, diagnosing and mitigating post‑deployment anomalies and integration challenges to maintain high availability.
• Technical Governance & Standardization: Establish and maintain robust technical documentation, defining operational standards and procedural frameworks to ensure process scalability and institutional knowledge transfer.

Must Haves

• Education: A degree or equivalent practical experience in computer science/engineering, with 5+ years of progressive systems administration experience.
• Patch Management Proficiency: Expert knowledge of enterprise patching tools, specifically WSUS and RedHat Satellite.
• Automation & IaC Excellence: Proven track record in Infrastructure as Code (IaC) and platform modernization utilizing Terraform and Ansible Automation Platform.
• Cross‑Platform Systems Expertise: Strong technical depth in Windows Server, Linux (RedHat), and VMware environments.
• Advanced Observability: Hands‑on experience with monitoring and logging ecosystems, such as Splunk Observability/Cloud and Grafana.
• Engineering Modernization & AI Integration: Strategic experience applying Generative AI tools (e.g., Copilot, Claude) to optimize code development and streamline operational workflows.
• Strategic Communication: Exceptional analytical, problem‑solving, and executive‑level written and verbal communication skills.

Nice to Haves

• Experience working with Kubernetes.
• Experience working with Citrix public cloud infrastructure, ideally AWS.

Salary Range: $110/hour - $120/hour CAD. The salary offered may vary based on factors, including, but not limited to, the successful candidate’s relevant knowledge, skills, and experience.

Please note that our company is not currently sponsoring work permit applications and the applicant must be authorized to work in the country where this position is located.

TMX is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide accommodations for applicants and employees who require it.