Senior Infrastructure Engineer - Vulnerability/Server

Lumenalta; United States; Remote; CAD 91,000 - 134,000; Full time

Benefits offered by this job

Health insurance (medical and dental)

Flexible working hours in a remote env

Professional development fund

15 days paid time off annually

Soft-skill development courses

Job summary

Lumenalta is seeking a Senior Infrastructure Engineer to own vulnerability remediation and server operations across a hybrid estate (Azure and on‑prem/third‑party data centers) for a client in a regulated banking domain. You will patch, upgrade, and harden Windows and Linux systems, and ensure documentation is current and accurate.

You will also drive configuration management, remediation on AKS/App Service, and CI/CD integration, coordinating with networking and platform teams to maintain

Qualifications

• 7+ years in infrastructure or operations with Azure experience.
• Strong Windows/Linux admin skills in a hybrid estate.
• Ownership of vulnerability remediation from tests and scanners.
• Experience with patching, upgrades, and change control at scale.
• Experience with CIS or similar hardening baselines.
• Experience integrating scanning/monitoring into CI/CD workflows.

Responsibilities

• Hybrid server operations across Azure VMs and on‑prem/third‑party data centers.
• Own remediation of findings from tests and scanners; triage and close items.
• Manage risk exceptions and drive to resolution with owners.
• Plan maintenance windows, reboots, rollback plans, and communications.
• Maintain server configurations and detect drift with Ansible/Intune/DSC.
• Remediate findings on AKS workloads and App Service with platform support.
• Integrate vulnerability scanning into CI/CD pipelines and monitoring.
• Collaborate with networking on NSG/Private Endpoints/VNet changes; write runbooks.

Skills

Azure

Windows Server

Linux

Vulnerability remediation

Patch management

Configuration management

CI/CD integration

Azure networking

Documentation

Strong English

Tools

Ansible

PowerShell DSC

Intune

Azure Update Manager

Qualys

Tenable

Terraform

Bicep

Job description

At Lumenalta, we partner with forward-thinking organizations to build technology solutions that scale, delight users, and accelerate business growth. Our global teams bring curiosity, commitment, and technical excellence to every project. We value transparency, autonomy, and impact, empowering every team member to do their best work.

About the Role

We are looking for a Senior Infrastructure Engineer to own vulnerability remediation and server operations across a hybrid estate spanning Azure and on-premises and third-party data centers for a client in a regulated banking domain. In this role you will remediate security findings across servers, containers, and applications, keep systems patched, upgraded, and hardened, and help keep the environment secure, reliable, and well documented.

What You'll Be Doing

• Hybrid server operations. Patch, upgrade, and harden Windows Server and Linux systems running as Azure VMs and as physical or hosted servers in on-premises and third-party data centers, using Azure Update Manager and configuration baselines such as CIS benchmarks.
• Vulnerability remediation ownership. Own findings from penetration tests and scanners such as Microsoft Defender for Cloud, Qualys, or Tenable: triage, prioritize, remediate, verify, and close each item.
• Exception management. Track risk exceptions and compensating controls, keep their status current, and drive them to resolution with the right owners.
• Patch and upgrade management. Plan maintenance windows, reboots, rollback plans, and stakeholder communication for patching and end-of-life software upgrades across the estate.
• Configuration management. Maintain server configurations and detect and correct drift, using tooling such as Ansible, PowerShell DSC, or Intune.
• Container and application layer fixes. Where findings land above the operating system, rebuild base images, upgrade dependencies and runtimes, and fix insecure configuration and secrets handling for workloads on AKS and App Service, rolling remediated workloads out safely in coordination with the application platform engineer.
• Pipeline and monitoring integration. Build vulnerability scanning into CI/CD pipelines, and set up monitoring and alerting so new findings and regressions are caught early.
• Networking and documentation. Work with networking teams on required NSG (network security group), private endpoint, and VNet changes, and write runbooks for remediation and patching procedures.

What We’re Looking For

• 7+ years of experience in infrastructure or operations, with at least 3 years hands-on in Azure.
• Strong Windows Server and Linux administration in production across a hybrid estate: Azure VMs alongside physical or hosted servers in on-premises or third-party data centers.
• Proven ownership of vulnerability remediation from penetration test and scanner findings, including exception tracking, patching, software upgrades, and configuration fixes across OS, container, and application layers, from finding to closure.
• Patch and upgrade management at scale, including maintenance windows, rollback planning, and change control.
• Experience with configuration management and hardening baselines (CIS or similar).
• Working knowledge of the container and application layers, enough to remediate findings on AKS workloads and App Services with support from the platform team.
• Experience integrating scanning, monitoring, and alerting into CI/CD and operations workflows.
• Working knowledge of Azure networking, including VNets, private endpoints, and NSGs.
• Strong documentation habits and the ability to work independently with a high degree of ownership.
• Advanced English and the ability to communicate technical issues clearly to engineers and client stakeholders in a distributed, remote team.

Nice to Have

• Experience with Microsoft Defender for Cloud, Defender for Endpoint, Qualys, Tenable, or container scanners such as Trivy.
• Automation with PowerShell, Bash, or Ansible.
• Familiarity with regulatory and audit frameworks such as PCI DSS or SOC 2.
• Experience in banking, financial services, or other regulated environments.
• Consulting or client-facing delivery experience.
• Infrastructure as code with Terraform or Bicep.
• Certifications such as AZ-500, AZ-104, or CompTIA Security+.

Why Lumenalta is an amazing place to work

At Lumenalta, you can expect that you will:

• Be 100% dedicated to one project at a time so that you can innovate and grow.
• Be a part of a team of talented and friendly senior-level engineers.
• Work on projects that allow you to use leading tech.

Salary range: CA$91,000 - CA$134,000 annually, with final compensation determined by your qualifications, expertise, experience, and the role's scope.

Location:

This is a fully remote position open to candidates based anywhere in the Americas, including the United States and Canada. Candidates must be able to work with full overlap with U.S. business hours to ensure effective collaboration with client and team schedules.

In addition to competitive pay, we offer a variety of benefits to support your professional and personal growth, including:

• Flexible working hours in a remote environment.
• Health insurance (medical and dental) for T4 Employees.
• A professional development fund to enhance your skills and knowledge.
• 15 days of paid time off annually.
• Access to soft-skill development courses to further your career.

This is a full-time position requiring a minimum of 40 hours per week, Monday through Friday.

Application Deadline

Applications will be accepted until November 6, 2026. Candidates can expect feedback by November 10, 2026.