Network Infrastructure Patch Management Engineer

CYNET SYSTEMS INC.
Cary, NC, United States
6 days ago
Apply on www.dice.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Job source

Tech stack

Application Programming Interfaces (APIs) Apple IOS Border Gateway Protocol Cisco PIX Cisco IOS Configuration Management Databases CompTIA Security+ Computer Networks Enhanced Interior Gateway Routing Protocol Firmware Hot Standby Router Protocol Multi-protocol Systems
+28 more
Junos Python (Programming Language) Network Security Network Monitoring Network Administration Network Protocols Citrix Systems Open Shortest Path First (OSPF) Package Management Systems Ansible Software Engineering Virtual Router Redundancy Protocols Software Vulnerability Management Wide Area Networks Load Balancing Nx-os ARUBA Firewalls (Computer Science) Juniper SolarWinds (Software) Palo Alto Networks Npm(Software) Fortinet Big Ip Cisco Qualys Servicenow Vmware

Job description

  • Manage the firmware / software lifecycle for routers, switches, firewalls, load balancers, and wireless controllers across multi-vendor environments (Cisco, Juniper, Aruba, Palo Alto, F5, Fortinet).
  • Assess vendor advisories (Cisco PSIRT, Juniper JSA, Palo Alto Security Advisories) and map CVEs to required upgrades; prioritise based on business impact and CVSS score.
  • Develop and maintain device-specific patching runbooks including pre-check scripts, upgrade procedures, rollback steps, and post-validation checks.
  • Automate network patch workflows using Ansible, Netmiko, NAPALM, or vendor APIs (Cisco NSO / DNA Centre).
  • Lead maintenance window planning: impact analysis, rollback testing, stakeholder communication, and CAB submission.
  • Oversee configuration backup integrity (RANCID / Oxidised / Cisco NSO) before every patching activity.
  • Conduct structured rollback for failed upgrades; perform root cause analysis and document findings.
  • Integrate network vulnerability data from Qualys / Tenable into the patch prioritisation workflow.
  • Monitor network stability post-patching using NMS/IPAM tools (SolarWinds, NetBrain, Infoblox).
  • Act as L2 escalation for L1 patch-related issues and routing/connectivity incidents.
  • Produce patch compliance reports and present to network management and security teams.
  • Drive patching SLA adherence: Critical vulnerabilities within 72 hours, High within 14 days.

Nice to Have:

  • SD-WAN patching exposure (Cisco Viptela, VMware VeloCloud) is advantageous., * Python.
  • Paramiko.
  • Cisco SMU.
  • Fortinet FortiOS.
  • Cisco ASA/FTD.
  • F5 BIG-IP.
  • Citrix ADC.
  • Cisco DNA Centre.
  • SolarWinds NPM/NCM.
  • NetBrain.
  • Infoblox.
  • ServiceNow.
  • CMDB.

Qualification And Education:

  • Cisco Certified Network Professional (CCNP Enterprise or Security).
  • Juniper Networks Certified Professional (JNCIP-ENT or JNCIP-SEC).
  • Palo Alto Networks Certified Network Security Engineer (PCNSE).
  • CompTIA Security+ or CySA+.
  • ITIL 4 Foundation or Managing Professional.

Requirements

  • Expert-level CLI skills: Cisco IOS / IOS-XE / NX-OS, Juniper JunOS, Aruba AOS, Palo Alto PAN-OS.
  • Deep understanding of network protocols: OSPF, BGP, EIGRP, MPLS, VRF, STP, HSRP/VRRP.
  • Experience with automated patching toolchains: Ansible, Netmiko, NAPALM, Python (Paramiko).
  • Vendor firmware lifecycle knowledge including feature releases, maintenance releases, and ED/MD trains (Cisco SMU, Juniper package management).
  • Firewall firmware management: Palo Alto, Fortinet FortiOS, Cisco ASA/FTD upgrade procedures.
  • Load balancer firmware: F5 BIG-IP or Citrix ADC upgrade methodology.
  • Network management platforms: Cisco DNA Centre, SolarWinds NPM/NCM, NetBrain, Infoblox.
  • Vulnerability management: parsing Cisco PSIRT, Juniper JSA, and NVD CVE data.
  • ITSM integration: ServiceNow change management, CMDB for network asset tracking.
  • Strong risk assessment skills: balances urgency with network stability.
  • Excellent planning skills for complex, multi-device maintenance windows.
  • Strong verbal and written communication skills.
  • Methodical documentation detailed runbooks, RCAs, and change records.
  • Proactive stays current with vendor EOL/EOS notices and security advisories., * Cisco IOS.
  • IOS-XE.
  • NX-OS.
  • Juniper JunOS.
  • Aruba AOS.
  • Palo Alto PAN-OS.
  • OSPF.
  • BGP.
  • EIGRP.
  • MPLS.
  • VRF.
  • STP.
  • HSRP/VRRP.
  • Ansible.

Benefits & conditions

Our Benefits Include:

  • Medical, Dental, and Vision Insurance
  • 401(k) Retirement Plan
  • Health Savings Account (HSA)
  • Disability Insurance (Short-Term and Long-Term)
  • Life and AD&D Insurance
  • Paid Sick Leave (where required by applicable state or local law)
  • Supplemental Insurance Plans
  • Identity Theft Protection
  • Pet Insurance
  • Employee Wellness Programs
  • Employee Assistance Program (EAP)
  • Career Growth and Professional Development Opportunities

About the company

Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc. is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:32 min

Grasping core networking and infrastructure automation components

Michael Cade · LIVE

1:34 min

Pivoting careers into specialized platform engineering roles

Xavier Portilla Edo · LIVE

7:31 min

Essential foundational skills and concepts for infrastructure roles

Megha Kadur · LIVE

Videos

See all

Related articles

See all