Infrastructure SME

Luxoft; Hinoba-an; On-site; PHP 900,000 - 1,200,000; Full time

Job summary

Luxoft seeks an experienced Infrastructure SME to lead security patching across the bank's core infrastructure. You will oversee planning, deployment, governance, vulnerability remediation, and change management, ensuring high availability and regulatory compliance.

The role requires deep Windows, Linux, virtualization, cloud and storage expertise, with strong experience in enterprise environments and 24x7 support. Collaboration with Cyber Security and IT teams is essential.

Qualifications

• Must have SME experience in security patch deployment within Infrastructure
• Strong core infrastructure expertise in large, regulated environments
• Deep knowledge of Windows Server administration
• Deep knowledge of Linux administration
• Experience with VMware/Hyper-V and enterprise virtualization
• Strong understanding of AD, DNS, DHCP, PKI and identity infrastructure
• Experience with storage, backup, DR and high availability solutions
• Extensive experience delivering enterprise security patching programs
• Strong understanding of vulnerability management and remediation processes
• Familiarity with CVSS scoring and risk-based patch prioritisation
• Experience with cloud platforms (Azure, AWS) and hybrid cloud controls
• Knowledge of Infrastructure as Code concepts and automation tooling
• Experience with one or more automation/tools such as SCCM/MECM, Intune, WSUS
• Automation tooling experience with PowerShell, Bash, Python
• Networking, storage, and monitoring technologies
• Experience with monitoring tools (SolarWinds, SCOM, Dynatrace) and ITSM/ITIL processes
• Production support in 24x7 environments
• Major incident management and RCA familiarity

Responsibilities

• Lead planning, scheduling, deployment, and governance of security patches across core infrastructure
• Assess vulnerabilities and set patching priorities by risk, criticality and regulatory needs
• Coordinate monthly and emergency patch cycles across multiple tech domains
• Validate patch deployments and remediate failed installations
• Support vulnerability remediation programs and remediation of findings
• Provide technical leadership across Windows, Linux, virtualization, cloud and storage domains
• Maintain high availability and operational stability during patch cycles
• Develop rollback and recovery strategies for infra changes
• Perform risk analyses before production deployments
• Collaborate with Cyber Security and Vulnerability teams on remediation priorities
• Ensure compliance with internal policies, patch SLAs and regulatory requirements
• Drive automation and continuous improvement in patch deployment processes
• Coordinate across infra, application, security and operations teams for changes
• Create implementation plans, technical docs, rollback procedures and post-implementation reviews
• Improve infrastructure monitoring, reporting and dashboards for patching

Skills

SME experience

Core infrastructure

Windows Server

Linux administration

VMware/Hyper-V

AD/DNS/DHCP

Storage/Backup/DR

Vulnerability mgmt

Cloud platforms

IaC concepts

Automation tooling

PowerShell

Bash

Python

Networking

Monitoring tools

Tools

SCCM/MECM

WSUS

Intune

Ansible

Puppet

Chef

PowerShell

Bash

Python

VMware vCenter

Azure Update Manager

AWS SSM

Job description

Project description

We are seeking an experienced Infrastructure SME to strengthen the teams responsible for the planning, coordination, deployment, and governance of security patches across the bank's core infrastructure estate. The role will provide technical leadership to ensure critical security updates are delivered efficiently while minimising operational risk and maintaining service availability.The successful candidate will possess deep infrastructure expertise across Windows, Linux, virtualisation, cloud, middleware, networking, storage, and enterprise platforms, with extensive experience managing large-scale patching programmes within highly regulated environments.

Responsibilities

• 1. Security Patch ManagementLead the planning, scheduling, deployment, and governance of security patches across the bank's core infrastructure.Assess security vulnerabilities and determine patching priorities based on risk, criticality, and regulatory requirements.Coordinate monthly and emergency patch cycles across multiple technology domains.Validate patch deployment success and ensure remediation of failed or incomplete installations.Support vulnerability remediation programmes and ensure timely closure of security findings.2. Core Infrastructure SMEProvide technical leadership across enterprise infrastructure including:Windows ServerLinux / UNIXVMware / Hyper-V virtualisationActive DirectoryDNS / DHCPStorage platforms (SAN/NAS)Enterprise backup and recoveryMiddleware and supporting infrastructureCloud platforms (Azure, AWS)Network infrastructure supporting core services3. Infrastructure Operations & ReliabilityMaintain high availability and operational stability throughout patch deployment activities.Develop rollback and recovery strategies for infrastructure changes.Perform impact assessments and risk analysis before production deployments.Support major incidents arising from infrastructure changes and security patching activities.4. Vulnerability & Security ManagementWork closely with Cyber Security and Vulnerability Management teams to prioritise remediation activities.Analyse vulnerability scan results and recommend appropriate remediation strategies.Ensure compliance with internal security policies, patch SLAs, and regulatory requirements.Support security audits and infrastructure compliance assessments.5. Change & Release ManagementLead infrastructure changes through established Change Management processes.Prepare implementation plans, technical documentation, rollback procedures, and post-implementation reviews.Coordinate deployment activities across infrastructure, application, security, and operations teams.Ensure changes are delivered with minimal disruption to business services.6. Automation & Continuous ImprovementIdentify opportunities to automate patch deployment and infrastructure maintenance activities.Improve operational processes through scripting, orchestration, and infrastructure automation.Enhance infrastructure monitoring, reporting, and compliance dashboards.Drive continual improvements in patching efficiency, quality, and operational resilience.7. Stakeholder ManagementCollaborate with Infrastructure, Cyber Security, Operations, Architecture, Application Support, and Change Management teams.Provide technical guidance during security reviews, infrastructure projects, and major incident investigations.Communicate infrastructure risks, patch status, and remediation plans to technical and management stakeholders.

SKILLS

Must have

• MUST HAVE: SME experience in security patch deployment within InfrastructureCore Infrastructure ExpertiseStrong experience supporting enterprise infrastructure within banking or other highly regulated environments.Deep knowledge of Windows Server and Linux administration.Experience with VMware, Hyper-V, and enterprise virtualisation technologies.Strong understanding of Active Directory, DNS, DHCP, PKI, and identity infrastructure.Experience with storage, backup, disaster recovery, and high-availability solutions.Infrastructure SecurityExtensive experience delivering enterprise security patching programmes.Strong understanding of vulnerability management and remediation processes.Familiarity with CVSS scoring, vulnerability assessment, and risk-based patch prioritisation.Experience with endpoint and server hardening aligned to security best practices.Cloud & Modern InfrastructureExperience supporting Azure and/or AWS infrastructure.Understanding of hybrid cloud environments and cloud security controls.Knowledge of Infrastructure as Code (IaC) concepts and automation tooling.Automation & ToolingExperience with one or more of:Microsoft SCCM / MECMMicrosoft IntuneWSUSRed Hat SatelliteAnsiblePuppetChefPowerShellBashPythonVMware vCenterAzure Update ManagerAWS Systems Manager (SSM)Infrastructure TechnologiesNetwork infrastructure (TCP/IP, firewalls, load balancers, switches, routing)Storage technologiesVirtualisation platformsMonitoring tools (SolarWinds, SCOM, Dynatrace, Splunk or equivalent)Backup and recovery platformsIT Service ManagementITIL Change, Incident and Problem ManagementProduction support within 24x7 enterprise environmentsMajor incident managementRoot Cause Analysis (RCA)

Nice to have

Microsoft Certified: Windows Server / Azure AdministratorRed Hat Certified Engineer (RHCE)VMware Certified Professional (VCP)AWS or Azure Cloud CertificationsITIL Foundation or higherCISSP, CompTIA Security+, or equivalent security certification (desirable)y