Senior Infrastructure Engineer – Exception Patching

Cyber Security training courses; Greater London; Hybrid; GBP 85,000 - 110,000; Full time

Job summary

Cyber Security training courses in the United Kingdom seeks a Senior Infrastructure Engineer to own end-to-end exception patching for a regulated remediation program. The role covers Linux, Windows Server, and databases with manual patches for systems outside automation, while coordinating with vendors and application owners.

The ideal candidate will manage pre-checks, backups, rollback plans and post-change validation, and will document systems and risks in weekly reports.

Qualifications

• 5+ years' hands-on systems administration across Linux and Windows.
• Proven patching experience on critical production databases (SQL Server, Oracle, PostgreSQL).
• Experience with virtualization platforms such as VMware, Hyper‑V or KVM.
• Strong ITIL and change-management discipline with clear documentation and ticketing/ITSM experience.
• Ownership mindset with the ability to see issues through to resolution.

Responsibilities

• Manually patch Linux (RHEL) and Windows Server systems outside automated tooling.
• Patch and maintain databases including clustered/high-availability configurations.
• Patch and maintain virtualization platforms (VMware vSphere/ESXi, Hyper‑V, KVM).
• Coordinate with application owners and vendors to agree patch levels and maintenance windows.
• Plan changes with pre-checks, backups, rollback plans and validation.
• Log and progress all work through the ticketing/change process and feed weekly reports.
• Act as escalation point for patching team on high-risk changes.
• Work out-of-hours and weekend windows as needed.
• Document systems that cannot be patched and recommend compensating controls.

Skills

Systems administration

Linux administration

Windows Server administration

Database patching

Virtualization

Troubleshooting

ITIL & Change mgmt

Stakeholder engagement

Ownership & accountability

Ticketing/ITSM

Tools

VMware vSphere/ESXi

Hyper-V

KVM

Tanium

Job description

The role

We are seeking an experienced Senior Infrastructure Engineer to lead exception patching for a critical remediation and compliance programme within a highly regulated financial services environment. This is a senior, hands‑on role suited to an individual who has owned complex patching and change across critical systems.

While automated tooling manages the majority of the estate, this role will be responsible for the systems it cannot reach: critical servers, investment and trading applications, databases, and systems that require manual, carefully controlled patching. Working alongside the cyber and infrastructure team, application owners and third-party vendors, you will ensure these systems remain secure without disrupting the business.

The successful candidate will take full ownership of their work from start to finish, following through on failed patches, maintaining accurate records, and raising risks early rather than waiting to be asked.

Key responsibilities

• Manually patch Linux (RHEL) and Windows Server systems that fall outside automated tooling, including critical and business-sensitive servers.
• Patch databases (e.g. SQL Server, Oracle, PostgreSQL), including clustered and high-availability configurations.
• Patch and maintain virtualisation platforms (e.g. VMware vSphere/ESXi, Hyper‑V, KVM).
• Work with application owners and vendors to agree certified patch levels and maintenance windows for investment and line‑of‑business systems.
• Plan each change carefully, including pre-checks, snapshots or backups, rollback plans, and post-change validation.
• Coordinate snapshot-before-change with the backup specialist on sensitive tiers.
• Document systems that cannot be patched and recommend compensating controls.
• Act as a point of escalation and guidance for the wider patching team on complex or high-risk changes.
• Work out‑of‑hours and weekend windows as needed.
• Log and progress all work through the client's ticketing and change process, and feed status into weekly reporting.

Essential skills

• 5+ years' hands‑on systems administration across Linux and Windows Server in enterprise environments.
• Strong Linux system administration.
• Strong Windows Server administration.
• Proven experience patching critical production databases, including clustered and high-availability setups.
• Experience with virtualisation platforms such as VMware, Hyper‑V or KVM.
• Confidence troubleshooting and rolling back failed changes.
• Confidence working directly with application owners, vendors and senior stakeholders to agree risk and timing.
• Strong ITIL and change-management discipline, with clear documentation and ticketing/ITSM experience.
• A methodical, low-error way of working.
• A strong sense of ownership and accountability, including seeing issues through to resolution.

Desirable skills

• Experience in financial services or another regulated environment.
• Scripting (Bash, PowerShell, Python).
• Experience working with third-party vendors on application patching.
• Familiarity with Tanium or similar endpoint management tools.

Certifications (desirable)

RHCSA/RHCE, Microsoft server certifications, VMware VCP, ITIL Foundation.