Infrastructure Engineer 2

The Infrastructure Patching & Security Engineering team ensures the security, stability, compliance, and operational resilience of enterprise infrastructure platforms through proactive patch management, vulnerability remediation, security hardening, automation, and continuous improvement.

The team is responsible for maintaining secure and compliant Red Hat Linux, Windows environments by implementing enterprise patching strategies, addressing security vulnerabilities, reducing infrastructure risk, and ensuring adherence to organizational security standards.

We are seeking an experienced Infrastructure Engineer with strong hands-on expertise in Red Hat Enterprise Linux (RHEL), Windows Server, VMware, system administration, OS patching, vulnerability management, infrastructure security, automation, and scripting. The ideal candidate will have extensive experience managing enterprise-wide patching operations, remediating security vulnerabilities, troubleshooting complex infrastructure issues, and driving automation to improve patch compliance and operational efficiency.

Required Experience & Technical Skills

• 7 years of overall IT infrastructure, system administration, patch management, or infrastructure security engineering experience.
• Strong hands-on experience managing enterprise-wide operating system patching and vulnerability remediation across large-scale infrastructure environments.
• Extensive expertise in Red Hat Enterprise Linux (RHEL 7/8/9 or later), including administration, patching, kernel upgrades, troubleshooting, and security hardening.
• Strong hands-on experience with Windows Server 2016/2019/2022 or later, including administration, security updates, patch deployment, and troubleshooting.
• Strong experience with VMware vSphere, ESXi, vCenter, virtualization management, patching, and lifecycle operations.
• Hands-on experience with Linux patch management tools such as Red Hat Satellite, YUM, DNF, and RPM.
• Experience with Windows patch management platforms such as SCCM/MECM, WSUS, or equivalent enterprise tools.
• Strong understanding of vulnerability management processes and remediation using tools such as Qualys, Tenable, Rapid7, or equivalent platforms.
• Strong experience with infrastructure automation and configuration management using Ansible.
• Hands-on scripting experience using Python, Bash/Shell scripting, and PowerShell.
• Strong understanding of operating system security hardening, CIS benchmarks, vulnerability remediation, and patch compliance.
• Experience managing critical and high-severity security vulnerabilities and meeting defined remediation SLAs.
• Good understanding of enterprise networking concepts, including TCP/IP, DNS, DHCP, routing, firewalls, and connectivity troubleshooting.
• Knowledge of enterprise storage technologies, filesystems, and infrastructure performance management.
• Experience with patching governance, change management, incident management, and ITIL processes.
• Strong troubleshooting skills across operating systems, infrastructure security, patching platforms, VMware, networking, and storage.
• Experience supporting large-scale production infrastructure in highly regulated environments.
• Strong communication, documentation, analytical, and cross-functional collaboration skills.

Preferred Qualifications

• Red Hat Certified System Administrator (RHCSA) or Red Hat Certified Engineer (RHCE).
• Microsoft Windows Server or infrastructure certification.
• Red Hat Ansible Automation certification.
• Experience with Red Hat Satellite, Ansible Automation Platform, Microsoft Configuration Manager, and enterprise patch orchestration solutions.
• Familiarity with ServiceNow, CMDB, change management, and automated patch compliance reporting.
• Knowledge of CIS benchmarks, NIST security frameworks, and enterprise security compliance requirements.
• Experience implementing automated vulnerability remediation and infrastructure security controls.

OS Patching & Infrastructure Security Operations

• Plan, coordinate, execute, and manage enterprise-wide operating system patching across Red Hat Linux and Windows infrastructure.
• Own end-to-end patch management activities, including patch assessment, planning, testing, deployment, validation, reporting, and remediation.
• Manage monthly, emergency, and out-of-band security patching cycles across production and non-production environments.
• Implement security patches, critical updates, kernel upgrades, and operating system fixes in accordance with enterprise security policies.
• Identify and remediate missing patches, outdated software packages, and infrastructure security vulnerabilities.
• Troubleshoot patch installation failures, dependency conflicts, repository issues, reboot failures, and post-patching system issues.
• Ensure patching activities are executed within approved maintenance windows with minimal business disruption.
• Develop patch rollback, recovery, and contingency procedures to minimize operational risks.
• Collaborate with infrastructure, application, cybersecurity, and change management teams to ensure timely patch deployment and compliance.

Red Hat Linux, Windows & VMware Administration

• Build, configure, administer, maintain, and troubleshoot enterprise Red Hat Enterprise Linux and Windows Server environments.
• Perform Linux patching using YUM, DNF, RPM, Red Hat Satellite, and related patch management tools.
• Manage Windows Server patching using Microsoft Configuration Manager (SCCM/MECM), WSUS, or equivalent enterprise patching platforms.
• Support VMware ESXi and vCenter patching, upgrades, lifecycle management, and security remediation.
• Troubleshoot Linux kernel issues, package dependencies, system services, boot failures, filesystem issues, and OS performance degradation.
• Administer Windows Server infrastructure, including Active Directory, Group Policy, DNS, DHCP, and Windows Update services.
• Perform server health checks, pre-patching readiness assessments, and post-patching validation.
• Support operating system upgrades, end-of-life remediation, server migrations, and infrastructure modernization.

Vulnerability Management & Security Remediation

• Partner with cybersecurity and vulnerability management teams to identify, assess, prioritize, and remediate infrastructure vulnerabilities.
• Analyze vulnerability scan results from tools such as Qualys, Tenable, Rapid7, or equivalent enterprise security platforms.
• Remediate critical and high-severity vulnerabilities within defined security SLAs.
• Investigate vulnerabilities associated with operating systems, software packages, system configurations, and infrastructure components.
• Implement security hardening recommendations based on CIS benchmarks, vendor guidance, and enterprise security standards.
• Address security findings related to outdated packages, insecure protocols, weak configurations, unsupported operating systems, and missing security patches.
• Support vulnerability exception management, risk acceptance processes, and remediation tracking.
• Coordinate with application owners and infrastructure teams to resolve vulnerabilities requiring application compatibility testing or planned downtime.
• Maintain accurate vulnerability remediation records, compliance evidence, and audit documentation.
• Drive continuous improvement initiatives to reduce vulnerability exposure and infrastructure security risk.

Patching Automation & Scripting

• Design, develop, and maintain automation solutions for enterprise infrastructure patching and security remediation.
• Automate Linux and Windows patch deployment, patch validation, compliance checks, and operational reporting.
• Develop automation scripts using Python, Bash, PowerShell, and Ansible.
• Implement Ansible playbooks for Linux patching, server configuration, security hardening, and vulnerability remediation.
• Automate patch readiness checks, server reboot coordination, service validation, and post-patching health checks.
• Integrate patching workflows with enterprise automation, orchestration, and IT service management platforms.
• Develop reusable scripts and automation frameworks to reduce manual intervention and improve patching consistency.
• Troubleshoot automation failures and continuously optimize patch deployment workflows.
• Identify opportunities to improve patch success rates, reduce patching cycle times, and increase infrastructure compliance through automation.

Patch Compliance, Governance & Reporting

• Track and maintain infrastructure patch compliance across Linux, Windows, and VMware platforms.
• Monitor patch deployment status, remediation progress, patch failures, and outstanding security vulnerabilities.
• Generate patch compliance dashboards, vulnerability remediation reports, and operational metrics.
• Ensure infrastructure patching activities align with enterprise security policies, regulatory requirements, and internal audit standards.
• Support security audits by providing patching evidence, remediation documentation, and compliance reports.
• Identify systems that are non-compliant, unsupported, or approaching end of life and develop remediation plans.
• Manage patching exceptions, risk assessments, and remediation timelines in coordination with cybersecurity and risk teams.
• Drive improvements in patch coverage, patch success rates, vulnerability remediation SLAs, and overall security posture.

Infrastructure Support & Incident Management

• Provide advanced L2/L3 technical support for Linux, Windows, VMware, and infrastructure patching platforms.
• Troubleshoot complex operating system, patching, application compatibility, performance, and availability issues.
• Participate in major incident management, root cause analysis (RCA), and problem management activities.
• Investigate infrastructure incidents caused by failed patches, operating system updates, configuration changes, or security remediation.
• Coordinate with application, database, network, storage, security, and infrastructure engineering teams to resolve cross-platform issues.
• Perform proactive infrastructure health checks, monitoring, and performance optimization.
• Support production change implementation, maintenance activities, and emergency security patch deployments.
• Develop and maintain operational runbooks, patching procedures, troubleshooting guides, and technical documentation.
• Participate in on-call support and scheduled maintenance activities to ensure critical infrastructure availability.