Linux Patching Engineer
Zapcom Group Inc
Boston, United States of America
17 days ago
Role details
Contract type
Permanent contract Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
English Experience level
SeniorJob location
Boston, United States of America
Tech stack
Automation of Tests
Bash
Software Bug Management
Linux
Package Management Systems
Red Hat Enterprise Linux - RHEL
Ansible
Software Vulnerability Management
Scripting (Bash/Python/Go/Ruby)
Selinux
Patch Management
Nessus
CIS Benchmarks
Ansible Tower
Qualys
Job description
We are looking for a Linux Patching Engineer to lead the end-to-end patch management lifecycle for our Red Hat Enterprise Linux (RHEL) environment. Your primary focus will be ensuring system security and stability by automating the deployment of Red Hat Security Advisories (RHSA) and bug fixes across development, staging, and production environments., * Patch Orchestration: Plan and execute monthly and emergency patching cycles for a large-scale RHEL footprint.
- Automation Development: Build and maintain Ansible Playbooks and Red Hat Satellite configurations to automate the "analyze-test-deploy" workflow.
- Vulnerability Management: Analyze reports from security scanners (e.g., Nessus, Qualys) and map them to specific RHEL errata for remediation.
- Infrastructure Health: Perform pre-patching health checks (disk space, repo connectivity) and post-patching validation (service uptime, kernel verification).
- Change Management: Manage maintenance windows and document all patching activities to meet compliance and audit requirements (SOX, PCI, or HIPAA)
- Troubleshooting: Resolve complex dependency issues, broken packages, or kernel-related boot failures following update cycles.
Requirements
- OS: Advanced proficiency in RHEL 7, 8, and 9 administration.
- Tools: Expert-level experience with Red Hat Satellite 6 (Content Views, Lifecycle Environments) and Ansible/Ansible Tower.
- Package Management: Deep understanding of YUM DNF and RPM management.
- Scripting: Strong ability to write Bash or Python scripts for custom automation tasks.
- Security: Familiarity with SELinux, Firewalld, and hardening standards like DISA STIGs or CIS Benchmarks.
Preferred Qualifications
- Certifications: Red Hat Certified System Administrator (RHCSA) or Engineer (RHCE) preferred.
- Experience: 5+ years specifically focused on patch management in an enterprise environment