Lead Enterprise Infrastructure Patch and Security Engineer

Hermitage, PA, US • Posted 15 days ago • Updated 8 hours ago
Full Time
On-site
Fitment

Dice Job Match Score™

👤 Reviewing your profile...

Job Details

Skills

  • Cloud Computing
  • Network
  • Operating Systems
  • Microsoft Windows
  • Risk Assessment
  • Change Control
  • Management
  • Feasibility Study
  • Migration
  • Documentation
  • Patch Management
  • Microsoft Windows Server
  • Microsoft Operating Systems
  • Linux
  • Red Hat Enterprise Linux
  • Microsoft SCCM
  • Ansible
  • IT Service Management
  • Cisco
  • DNA
  • PKI
  • ITIL
  • Change Management
  • Incident Management
  • Configuration Management Database
  • Regulatory Compliance
  • Reporting
  • Auditing
  • Scripting
  • Windows PowerShell
  • Bash
  • Python

Summary

We are seeking a highly skilled Lead Infrastructure Security & Patch Management Engineer to reduce security risk and maintain patch compliance across Infrastructure Services. This role is responsible for managing enterprise-wide remediation efforts using approved tools and processes across Windows Server, Enterprise Linux, cloud and on-prem environments, network devices, and other in-scope assets.

Key Responsibilities
  • Own and manage the Security Remediation Program, ensuring alignment with Security findings (Critical, High, Medium).
  • Plan, schedule, and execute monthly operating system patching for Windows and Linux environments, including canary deployments, defined maintenance windows, and rollback strategies.
  • Lead zero-day and out-of-band patching efforts with expedited risk assessment and adherence to change control processes.
  • Deliver extended remediation activities, including updates to ciphers, protocols, file permissions, and third-party applications; coordinate with vendors as needed.
  • Administer and operate enterprise patching and security tooling, including MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, and Venafi, with manual deployments when required.
  • Manage quarterly component updates and oversee certificate lifecycle processes (PKI/DigiCert), including feasibility analysis for migrations from self-signed to PKI certificates.
  • Develop and publish compliance reports, audit documentation, and governance updates.
  • Facilitate and lead weekly Security-Infrastructure standups to track remediation progress and address risks.

Required Qualifications
  • 5+ years of experience in infrastructure security and patch management.
  • Strong expertise in Windows Server and Enterprise Linux environments (e.g., RHEL).
  • Hands-on experience with enterprise tools such as MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, and Venafi/PKI.
  • Solid understanding of ITIL processes, including change management, incident management, and CMDB maintenance.
  • Experience with compliance reporting and audit support.
  • Scripting proficiency in PowerShell, Bash, or Python.
  • Demonstrated experience with canary deployments and rollback procedures.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10366007
  • Position Id: 7e1d3b56a85686e8aa8653670c14cdb5
  • Posted 15 days ago
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Hermitage, Pennsylvania

Today

Full-time

Remote

Today

Contract

$35.00 - $40.00

Remote

5d ago

Easy Apply

Contract

45 - 55

Remote

Today

Full-time

USD 70,000.00 per year

Search all similar jobs