Infrastructure Patch and Security Engineer

All Lines Technology; Hermitage (Mercer County); On-site; USD 110,000 - 150,000; Full time

Job summary

All Lines Technology seeks an experienced infrastructure security professional to own patch management across Windows and Linux, on‑prem and cloud, coordinating with MECM/SCCM, Ansible, and other tooling to maintain compliance and reduce risk.

The role requires planning monthly patch cycles, handling zero‑day responses, and managing certificate lifecycles and governance artifacts. Strong scripting and ITIL practices are essential for success.

Qualifications

• 5+ years in infrastructure security/patch management for Windows Server and Linux.
• Hands-on with MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi PKI.
• Strong ITIL change/incident management and compliance reporting.
• Scripting skills in PowerShell, Bash, Python; canary strategies and rollback procedures.

Responsibilities

• Own Security Remediation Program management aligned to Security’s findings (Critical/High/Medium).
• Plan, schedule, and execute monthly OS patching (Windows/Linux) with canaries, maintenance windows, and rollback.
• Run zero‑day/out‑of‑band patching with expedited assessment and change controls.
• Deliver extended remediations (cipher/protocol, file rights, 3rd‑party updates) and coordinate vendor engagement.
• Publish compliance reports, audit artifacts, and governance updates; chair weekly Security–Infrastructure standups.

Skills

MECM/SCCM

Ansible

Rapid7

Ivanti ITSM

Cisco DNA

Panorama

Venafi PKI

PowerShell

Bash

Python

Job description

Reduce security risk and maintain patch compliance across Infrastructure Services using approved tooling and processes (Windows Server, Enterprise Linux, cloud/on‑prem, network devices, and assets in scope).

What You’ll Do

• Own Security Remediation Program management aligned to Security’s findings (Critical/High/Medium).
• Plan, schedule, and execute monthly OS patching (Windows/Linux) with canaries, maintenance windows, and rollback.
• Run zero‑day/out‑of‑band patching with expedited assessment and change controls.
• Deliver extended remediations (cipher/protocol, file rights, 3rd‑party updates) and coordinate vendor engagement.
• Operate tooling: MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi; perform manual deployments where required.
• Manage quarterly component updates and certificate lifecycle (PKI/DigiCert), including self‑signed to PKI migration feasibility.
• Publish compliance reports, audit artifacts, and governance updates; chair weekly Security–Infrastructure standups.

What You’ll Bring

• 5+ years in infrastructure security/patch management across Windows Server & Enterprise Linux (RHEL/others).
• Hands‑on experience with MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi/PKI.
• Strong ITIL change & incident management, CMDB updates, compliance reporting.
• Scripting skills (PowerShell/Bash/Python), canary strategies, rollback procedures.