Lead Enterprise Infrastructure Patch and Security Engineer

All Lines Technology Inc.; Hermitage (Mercer County); On-site; USD 90,000 - 120,000; Full time

Job summary

All Lines Technology Inc. is looking for a Lead Infrastructure Security & Patch Management Engineer in Hermitage, United States. The role focuses on reducing security risks and maintaining compliance across various environments including cloud and on-prem services.

Applicants should have over 5 years of experience in patch management, strong expertise in both Windows and Linux systems, and proficiency with enterprise security tools. This is a critical position ensuring security alignment across the organization.

Qualifications

• 5+ years of experience in infrastructure security and patch management.
• Strong expertise in Windows Server and Enterprise Linux environments.
• Hands-on experience with enterprise security tools.

Responsibilities

• Own and manage the Security Remediation Program.
• Plan, schedule, and execute monthly operating system patching.
• Lead zero-day and out-of-band patching efforts.

Skills

Infrastructure security

Patch management

Windows Server

Enterprise Linux

Scripting (PowerShell, Bash, Python)

ITIL processes

Tools

MECM/SCCM

Ansible

Rapid7

Ivanti ITSM

Cisco DNA

Panorama

Venafi/PKI

Job description

We are seeking a highly skilled Lead Infrastructure Security & Patch Management Engineer to reduce security risk and maintain patch compliance across Infrastructure Services. This role is responsible for managing enterprise-wide remediation efforts using approved tools and processes across Windows Server, Enterprise Linux, cloud and on-prem environments, network devices, and other in-scope assets.

Key Responsibilities

• Own and manage the Security Remediation Program, ensuring alignment with Security findings (Critical, High, Medium).
• Plan, schedule, and execute monthly operating system patching for Windows and Linux environments, including canary deployments, defined maintenance windows, and rollback strategies.
• Lead zero-day and out-of-band patching efforts with expedited risk assessment and adherence to change control processes.
• Deliver extended remediation activities, including updates to ciphers, protocols, file permissions, and third-party applications; coordinate with vendors as needed.
• Administer and operate enterprise patching and security tooling, including MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, and Venafi, with manual deployments when required.
• Manage quarterly component updates and oversee certificate lifecycle processes (PKI/DigiCert), including feasibility analysis for migrations from self-signed to PKI certificates.
• Develop and publish compliance reports, audit documentation, and governance updates.
• Facilitate and lead weekly Security-Infrastructure standups to track remediation progress and address risks.

Required Qualifications

• 5+ years of experience in infrastructure security and patch management.
• Strong expertise in Windows Server and Enterprise Linux environments (e.g., RHEL).
• Hands-on experience with enterprise tools such as MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, and Venafi/PKI.
• Solid understanding of ITIL processes, including change management, incident management, and CMDB maintenance.
• Experience with compliance reporting and audit support.
• Scripting proficiency in PowerShell, Bash, or Python.
• Demonstrated experience with canary deployments and rollback procedures.