Enterprise Infrastructure Patch and Security Engineer

alllinestechnology; Hermitage (Mercer County); On-site; USD 90,000 - 120,000; Full time

Job summary

alllinestechnology is seeking a professional to enhance security and compliance by overseeing patch management across various infrastructures including Windows and Enterprise Linux. You will manage security remediation programs and guide the patching process effectively.

The ideal candidate has over 5 years of experience in infrastructure security, a strong background in security tools, and scripting skills. This position requires proactive management to ensure compliance and reduce risks.

Qualifications

• 5+ years in infrastructure security/patch management across Windows Server and Enterprise Linux.
• Hands-on experience with a variety of security tools.
• Strong ITIL change and incident management skills.

Responsibilities

• Manage monthly OS patching for Windows and Linux environments.
• Oversee Security Remediation Program management.
• Publish compliance reports and governance updates.

Skills

Infrastructure security

Patch management

Scripting (PowerShell/Bash/Python)

MECM/SCCM

Ansible

Strong ITIL change management

Tools

Rapid7

Ivanti ITSM

Cisco DNA

Panorama

Venafi/PKI

Job description

Purpose of this role

Reduce security risk and maintain patch compliance across Infrastructure Services using approved tooling and processes (Windows Server, Enterprise Linux, cloud/on‑prem, network devices, and assets in scope).

What You’ll Do

• Own Security Remediation Program management aligned to Security’s findings (Critical/High/Medium).
• Plan, schedule, and execute monthly OS patching (Windows/Linux) with canaries, maintenance windows, and rollback.
• Run zero‑day/out‑of‑band patching with expedited assessment and change controls.
• Deliver extended remediations (cipher/protocol, file rights, 3rd‑party updates) and coordinate vendor engagement.
• Operate tooling: MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi; perform manual deployments where required.
• Manage quarterly component updates and certificate lifecycle (PKI/DigiCert), including self‑signed to PKI migration feasibility.
• Publish compliance reports, audit artifacts, and governance updates; chair weekly Security–Infrastructure standups.

What You’ll Bring

• 5+ years in infrastructure security/patch management across Windows Server & Enterprise Linux (RHEL/others).
• Hands‑on experience with MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi/PKI.
• Strong ITIL change & incident management, CMDB updates, compliance reporting.
• Scripting skills (PowerShell/Bash/Python), canary strategies, rollback procedures.
• Nice‑to‑have: ITIL v4, Security+, RHCSA/RHCE, Microsoft Certified, CCNA/CCNP, GIAC/GVM.