Enterprise Infrastructure Patch and Security Engineer

All Lines Technology Inc.; Hermitage (Mercer County); On-site; USD 80,000 - 110,000; Full time

Job summary

All Lines Technology Inc. is seeking an experienced Infrastructure Security Specialist to reduce security risks and maintain patch compliance for Infrastructure Services. The role requires over 5 years of experience in patch management for Windows Server and Enterprise Linux, along with hands-on knowledge of tools like MECM/SCCM, Ansible, and Rapid7. The specialist will manage security remediation efforts, execute monthly OS patching, and publish compliance reports. This position is based in Hermitage, Mercer County, United States.

Qualifications

• 5+ years in infrastructure security/patch management across Windows Server & Enterprise Linux.
• Hands-on experience with security tools and scripting.
• Strong ITIL change & incident management skills.

Responsibilities

• Manage Security Remediation Program management and OS patching.
• Run zero-day/out-of-band patching.
• Publish compliance reports and chair weekly Security–Infrastructure standups.

Skills

Infrastructure security management

Patch management, Windows Server

Ansible

Scripting skills (PowerShell/Bash/Python)

Tools

MECM/SCCM

Rapid7

Ivanti ITSM

Cisco DNA

Venafi/PKI

Job description

Purpose of this role

Reduce security risk and maintain patch compliance across Infrastructure Services using approved tooling and processes (Windows Server, Enterprise Linux, cloud/on‑prem, network devices, and assets in scope).

What You’ll Do

• Own Security Remediation Program management aligned to Security’s findings (Critical/High/Medium).
• Plan, schedule, and execute monthly OS patching (Windows/Linux) with canaries, maintenance windows, and rollback.
• Run zero-day/out‑of‑band patching with expedited assessment and change controls.
• Deliver extended remediations (cipher/protocol, file rights, 3rd‑party updates) and coordinate vendor engagement.
• Operate tooling: MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi; perform manual deployments where required.
• Manage quarterly component updates and certificate lifecycle (PKI/DigiCert), including self‑signed to PKI migration feasibility.
• Publish compliance reports, audit artifacts, and governance updates; chair weekly Security–Infrastructure standups.

What You’ll Bring

• 5+ years in infrastructure security/patch management across Windows Server & Enterprise Linux (RHEL/others).
• Hands‑on experience with MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi/PKI.
• Strong ITIL change & incident management, CMDB updates, compliance reporting.
• Scripting skills (PowerShell/Bash/Python), canary strategies, rollback procedures.
• Nice‑to‑have: ITIL v4, Security+, RHCSA/RHCE, Microsoft Certified, CCNA/CCNP, GIAC/GVM.