The role
We are seeking an experienced Senior Infrastructure Engineer to lead exception patching for a critical remediation and compliance programme within a highly regulated financial services environment. This is a senior, hands‑on role suited to an individual who has owned complex patching and change across critical systems.
While automated tooling manages the majority of the estate, this role will be responsible for the systems it cannot reach: critical servers, investment and trading applications, databases, and systems that require manual, carefully controlled patching. Working alongside the cyber and infrastructure team, application owners and third-party vendors, you will ensure these systems remain secure without disrupting the business.
The successful candidate will take full ownership of their work from start to finish, following through on failed patches, maintaining accurate records, and raising risks early rather than waiting to be asked.
Key responsibilities
- Manually patch Linux (RHEL) and Windows Server systems that fall outside automated tooling, including critical and business-sensitive servers.
- Patch databases (e.g. SQL Server, Oracle, PostgreSQL), including clustered and high-availability configurations.
- Patch and maintain virtualisation platforms (e.g. VMware vSphere/ESXi, Hyper‑V, KVM).
- Work with application owners and vendors to agree certified patch levels and maintenance windows for investment and line‑of‑business systems.
- Plan each change carefully, including pre-checks, snapshots or backups, rollback plans, and post-change validation.
- Coordinate snapshot-before-change with the backup specialist on sensitive tiers.
- Document systems that cannot be patched and recommend compensating controls.
- Act as a point of escalation and guidance for the wider patching team on complex or high-risk changes.
- Work out‑of‑hours and weekend windows as needed.
- Log and progress all work through the client's ticketing and change process, and feed status into weekly reporting.
Essential skills
- 5+ years' hands‑on systems administration across Linux and Windows Server in enterprise environments.
- Strong Linux system administration.
- Strong Windows Server administration.
- Proven experience patching critical production databases, including clustered and high-availability setups.
- Experience with virtualisation platforms such as VMware, Hyper‑V or KVM.
- Confidence troubleshooting and rolling back failed changes.
- Confidence working directly with application owners, vendors and senior stakeholders to agree risk and timing.
- Strong ITIL and change-management discipline, with clear documentation and ticketing/ITSM experience.
- A methodical, low-error way of working.
- A strong sense of ownership and accountability, including seeing issues through to resolution.
Desirable skills
- Experience in financial services or another regulated environment.
- Scripting (Bash, PowerShell, Python).
- Experience working with third-party vendors on application patching.
- Familiarity with Tanium or similar endpoint management tools.
Certifications (desirable)
RHCSA/RHCE, Microsoft server certifications, VMware VCP, ITIL Foundation.