Lead Enterprise Infrastructure Patch and Security Engineer

alllinestechnology; Hermitage (Mercer County); On-site; USD 90,000 - 120,000; Full time

Job summary

alllinestechnology is seeking a highly skilled Lead Infrastructure Security & Patch Management Engineer to enhance security and compliance across various environments. You will manage security remediation efforts and execute operating system patching for Windows and Linux systems.

The ideal candidate should have over 5 years of experience, strong expertise in enterprise security tools, and solid understanding of ITIL processes. This position is pivotal in maintaining security standards and timely updates across infrastructures.

Qualifications

• 5+ years of experience in infrastructure security and patch management.
• Strong expertise in Windows Server and Enterprise Linux environments.
• Hands-on experience with enterprise tools for security and patching.

Responsibilities

• Manage the Security Remediation Program and ensure alignment with Security findings.
• Plan and execute monthly operating system patching for Windows and Linux.
• Lead zero-day and out-of-band patching efforts with risk assessment.

Skills

Infrastructure security

Patch management

Windows Server

Enterprise Linux

Scripting (PowerShell, Bash, Python)

Tools

MECM/SCCM

Ansible

Rapid7

Ivanti ITSM

Cisco DNA

Panorama

Venafi/PKI

Job description

We are seeking a highly skilled Lead Infrastructure Security & Patch Management Engineer to reduce security risk and maintain patch compliance across Infrastructure Services. This role is responsible for managing enterprise-wide remediation efforts using approved tools and processes across Windows Server, Enterprise Linux, cloud and on‑prem environments, network devices, and other in‑scope assets.

Key Responsibilities

• Own and manage the Security Remediation Program, ensuring alignment with Security findings (Critical, High, Medium).
• Plan, schedule, and execute monthly operating system patching for Windows and Linux environments, including canary deployments, defined maintenance windows, and rollback strategies.
• Lead zero‑day and out‑of‑band patching efforts with expedited risk assessment and adherence to change control processes.
• Deliver extended remediation activities, including updates to ciphers, protocols, file permissions, and third‑party applications; coordinate with vendors as needed.
• Administer and operate enterprise patching and security tooling, including MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, and Venafi, with manual deployments when required.
• Manage quarterly component updates and oversee certificate lifecycle processes (PKI/DigiCert), including feasibility analysis for migrations from self‑signed to PKI certificates.
• Develop and publish compliance reports, audit documentation, and governance updates.
• Facilitate and lead weekly Security–Infrastructure standups to track remediation progress and address risks.

Required Qualifications

• 5+ years of experience in infrastructure security and patch management.
• Strong expertise in Windows Server and Enterprise Linux environments (e.g., RHEL).
• Hands‑on experience with enterprise tools such as MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, and Venafi/PKI.
• Solid understanding of ITIL processes, including change management, incident management, and CMDB maintenance.
• Experience with compliance reporting and audit support.
• Scripting proficiency in PowerShell, Bash, or Python.
• Demonstrated experience with canary deployments and rollback procedures.