Infrastructure Engineer II

The Infrastructure Patching & Security Engineering team ensures the security, stability, compliance, and operational resilience of enterprise infrastructure platforms through proactive patch management, vulnerability remediation, security hardening, automation, and continuous improvement.

The team is responsible for maintaining secure and compliant Red Hat Linux, Windows environments by implementing enterprise patching strategies, addressing security vulnerabilities, reducing infrastructure risk, and ensuring adherence to organizational security standards.

We are seeking an experienced Infrastructure Engineer with strong hands-on expertise in Red Hat Enterprise Linux (RHEL), Windows Server, VMware, system administration, OS patching, vulnerability management, infrastructure security, automation, and scripting.

The ideal candidate will have extensive experience managing enterprise-wide patching operations, remediating security vulnerabilities, troubleshooting complex infrastructure issues, and driving automation to improve patch compliance and operational efficiency.

OS Patching & Infrastructure Security Operations Plan, coordinate, execute, and manage enterprise-wide operating system patching across Red Hat Linux and Windows infrastructure.

Own end-to-end patch management activities, including patch assessment, planning, testing, deployment, validation, reporting, and remediation.

Manage monthly, emergency, and out-of-band security patching cycles across production and non-production environments.

Implement security patches, critical updates, kernel upgrades, and operating system fixes in accordance with enterprise security policies.

Identify and remediate missing patches, outdated software packages, and infrastructure security vulnerabilities.

Troubleshoot patch installation failures, dependency conflicts, repository issues, reboot failures, and post-patching system issues.

Ensure patching activities are executed within approved maintenance windows with minimal business disruption.

Develop patch rollback, recovery, and contingency procedures to minimize operational risks.

Collaborate with infrastructure, application, cybersecurity, and change management teams to ensure timely patch deployment and compliance.

Red Hat Linux, Windows & VMware Administration Build, configure, administer, maintain, and troubleshoot enterprise Red Hat Enterprise Linux and Windows Server environments.

Perform Linux patching using YUM, DNF, RPM, Red Hat Satellite, and related patch management tools.

Manage Windows Server patching using Microsoft Configuration Manager (SCCM/MECM), WSUS, or equivalent enterprise patching platforms.

Support VMware ESXi and vCenter patching, upgrades, lifecycle management, and security remediation.

Troubleshoot Linux kernel issues, package dependencies, system services, boot failures, filesystem issues, and OS performance degradation.

Administer Windows Server infrastructure, including Active Directory, Group Policy, DNS, DHCP, and Windows Update services.

Perform server health checks, pre-patching readiness assessments, and post-patching validation.

Support operating system upgrades, end-of-life remediation, server migrations, and infrastructure modernization.

Vulnerability Management & Security Remediation Partner with cybersecurity and vulnerability management teams to identify, assess, prioritize, and remediate infrastructure vulnerabilities.

Analyze vulnerability scan results from tools such as Qualys, Tenable, Rapid7, or equivalent enterprise security platforms.

Remediate critical and high-severity vulnerabilities within defined security SLAs.

Investigate vulnerabilities associated with operating systems, software packages, system configurations, and infrastructure components.

Implement security hardening recommendations based on CIS benchmarks, vendor guidance, and enterprise security standards.

Address security findings related to outdated packages, insecure protocols, weak configurations, unsupported operating systems, and missing security patches.

Support vulnerability exception management, risk acceptance processes, and remediation tracking.

Coordinate with application owners and infrastructure teams to resolve vulnerabilities requiring application compatibility testing or planned downtime.

Maintain accurate vulnerability remediation records, compliance evidence, and audit documentation.

Drive continuous improvement initiatives to reduce vulnerability exposure and infrastructure security risk.

Patching Automation & Scripting Design, develop, and maintain automation solutions for enterprise infrastructure patching and security remediation.

Automate Linux and Windows patch deployment, patch validation, compliance checks, and operational reporting.

Develop automation scripts using Python, Bash, PowerShell, and Ansible.

Implement Ansible playbooks for Linux patching, server configuration, security hardening, and vulnerability remediation.

Automate patch readiness checks, server reboot coordination, service validation, and post-patching health checks.

Integrate patching workflows with enterprise automation, orchestration, and IT service management platforms.

Develop reusable scripts and automation frameworks to reduce manual intervention and improve patching consistency.

Troubleshoot automation failures and continuously optimize patch deployment workflows.

Identify opportunities to improve patch success rates, reduce patching cycle times, and increase infrastructure compliance through automation.

Patch Compliance, Governance & Reporting Track and maintain infrastructure patch compliance across Linux, Windows, and VMware platforms.

Monitor patch deployment status, remediation progress, patch failures, and outstanding security vulnerabilities.

Generate patch compliance dashboards, vulnerability remediation reports, and operational metrics.

Ensure infrastructure patching activities align with enterprise security policies, regulatory requirements, and internal audit standards.

Su