Senior Infrastructure Automation Engineer

Fisher Investments; Camas (WA); On-site; USD 130,000 - 175,000; Full time

Benefits offered by this job

Premium health benefits (medical, dent

401(k) match

Generous PTO and holidays

Family support programs

Hybrid work option

Job summary

Fisher Investments is seeking a Senior Infrastructure Automation Engineer to enhance our patching automation and vulnerability remediation across Windows and Linux servers. You will build end-to-end automation, create Ansible playbooks, and coordinate with Infosec, Infrastructure, and app support to prioritize and close findings.

You will work with Tenable/Qualys, Ivanti, WSUS/MECM, Intune, and Azure Update Manager, applying risk-based prioritization, and communicating remediation progress.

Qualifications

• 8+ years of experience in IT Infrastructure and Operations.
• 5+ years in server management (Windows/Linux) and patch remediation.
• Experience with vulnerability management platforms Tenable/Qualys.
• Experience with enterprise patching and tooling (Ivanti, WSUS, SCCM/MECM, Intune, Azure Update Manager).
• Knowledge of CVE/CVSS scoring and security compliance.
• Proficiency in Python, Bash, or PowerShell.
• Bachelor's degree in MIS/CS or related field.

Responsibilities

• Build and maintain a standardized patching process and an end-to-end automated remediation framework.
• Design, develop, and implement Ansible playbooks/roles and PowerShell/Python scripts for patching and config management.
• Analyze vulnerability findings, prioritize remediation based on risk and exploitability.
• Coordinate remediation activities with InfoSec, Infrastructure, and application support teams.
• Perform patching across Windows and Linux to close findings.
• Reduce backlog and improve patch schedule to ensure sustainable compliance.
• Manage exceptions, risk acceptance, and compensating controls.
• Track trends and report remediation progress and patch metrics to leadership.
• Conduct root cause analysis of recurring vulnerabilities and identify patterns.
• Identify manual steps and automate them through tooling and standardization.
• Improve automation and alignment with security/audit requirements.
• Collaborate with System Administrators, Cloud Engineers, Infosec, and Network teams.
• Provide international and 24/7 on-call support.

Skills

IT Infrastructure

Server management

Vulnerability remediation

Automation

Scripting (Python/Bash/PowerShell)

Education

Bachelor's degree in MIS/CS or related

Tools

Tenable/Qualys

Ivanti

WSUS/MECM

Intune

Azure Update Manager

Job description

Overview

It's an exciting time to join Fisher Investments; we're investing in the future of our firm's technology and information security. Our business is growing internationally, which emphasizes the need to build an unparalleled team that promotes future global growth through strategic solutions and progress. We are looking for a Senior Infrastructure Automation Engineer to join our Infrastructure Platform Team and assist us in supporting and maintaining our Platform.

Overview

It's an exciting time to join Fisher Investments; we're investing in the future of our firm's technology and information security. Our business is growing internationally, which emphasizes the need to build an unparalleled team that promotes future global growth through strategic solutions and progress. We are looking for a Senior Infrastructure Automation Engineer to join our Infrastructure Platform Team and assist us in supporting and maintaining our Platform.

The Opportunity

The Senior Infrastructure Automation Engineer reduces infrastructure risk by remediating vulnerabilities across the server environment and eliminating their causes through automation. You will analyze vulnerability data, prioritize findings based on risk, coordinate and perform patching, validate results, and report on remediation trends to reverse the current vulnerability trend and establish sustainable patch compliance. You will report to the Cloud Platform Team Lead.

The Day-to-Day

• Build and maintain a standardized patching process and an end-to-end automated vulnerability remediation framework, including selection, build, and maintenance of the supporting toolset
• Design, develops, and implements Ansible playbooks and roles, and PowerShell / Python scripts, to automate patching, remediation, infrastructure provisioning, and configuration management
• Analyze vulnerability findings across the server estate; categorize, correlates, and de-duplicates findings, and prioritizes remediation based on risk, exploitability, and growth
• Identify server and application ownership, and coordinate remediation activities with Information Security, Infrastructure, and application support teams
• Perform patching and vulnerability remediation across Windows and Linux server environments to validate that findings are fully closed.
• Reduce the existing vulnerability backlog and improve patch schedule to establish sustainable, measurable patch compliance
• Manage exceptions, risk acceptances, and compensating controls where remediation is not immediately achievable
• Track trends, and reports remediation progress and patch compliance metrics to leadership and partners
• Perform root cause analysis on recurring vulnerabilities and identify the vulnerable software, packages, configurations, and build patterns that drive repeat findings
• Identify manual and repetitive remediation steps and eliminate them through automation, tooling, and standardization
• Improve automation, efficiency, consistency, and adherence to security / audit requirements and controls
• Collaborate with System administrators, Cloud Engineers, Infosec, and Network professionals to gather requirements and provide scalable and maintainable automation solutions
• Provide international and 24/7 support through on-call duties and working a flexible off-hours schedule for planned and unplanned maintenance

Your Qualifications

• 8+ years of experience in IT Infrastructure and Operations
• 5+ Years of experience in
  • Server Management, including Windows and Linux
  • Enterprise patch management and server vulnerability remediation
  • Automation, playbook and role creation using tools like Ansible
• Hands-on experience with vulnerability management platforms such as Tenable/Qualys, including analyzing, prioritizing, and reporting on findings
• Experience with enterprise patching and configuration tooling (e.g. Ivanti, WSUS, SCCM / MECM, Intune, Azure Update Manager, or equivalent Linux patching tooling)
• Working knowledge of CVE and CVSS scoring, risk-based prioritization, and security compliance and audit requirements
• Proficiency in scripting languages such as Python, Bash, or PowerShell
• Bachelor's degree in MIS, computer science, or related field required or equivalent combination of education and experience

Compensation

• $130,000 - $175,000 base salary per year in the state of WA. New hires should expect to start at the lower end of the range depending on experience
• Eligible for a discretionary bonus based on firm and individual performance

Why Fisher Investments

We work for a bigger purpose: bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like:

• 100% paid medical, dental and vision premiums for you and your qualifying dependents
• A 50% 401(k) match, up to the IRS maximum
• 20 days of PTO, plus 10 paid holidays
• Family Support programs including 8 week Paid Primary Caregiver Leave, $10,000 fertility, family forming, and hormonal health assistance, and back-up child, adult, and elder care
• This is an in-office role. Based on your role, tenure, and performance eligibility you may have the opportunity to participate in our hybrid work from home program. This program is subject to change.

FISHER INVESTMENTS IS AN EQUAL OPPORTUNITY EMPLOYER