> Markdown version of [/jobs/ext/2241228-network-infrastructure-patch-management-engineer](https://www.wearedevelopers.com/jobs/ext/2241228-network-infrastructure-patch-management-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Infrastructure Patch Management Engineer - **Company:** CYNET SYSTEMS INC. - **Location:** Cary, NC, United States - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Apple IOS, Border Gateway Protocol, Cisco PIX, Cisco IOS, Configuration Management Databases, CompTIA Security+, Computer Networks, Enhanced Interior Gateway Routing Protocol, Firmware, Hot Standby Router Protocol, Multi-protocol Systems, Junos, Python (Programming Language), Network Security, Network Monitoring, Network Administration, Network Protocols, Citrix Systems, Open Shortest Path First (OSPF), Package Management Systems, Ansible, Software Engineering, Virtual Router Redundancy Protocols, Software Vulnerability Management, Wide Area Networks, Load Balancing, Nx-os, ARUBA, Firewalls (Computer Science), Juniper, SolarWinds (Software), Palo Alto Networks, Npm(Software), Fortinet, Big Ip, Cisco, Qualys, Servicenow, Vmware - **Published:** August 26, 2026 - **Apply:** https://www.dice.com/job-detail/06460dea-4da9-4a71-86ec-e5229f85b358 ## About the Role * Expert-level CLI skills: Cisco IOS / IOS-XE / NX-OS, Juniper JunOS, Aruba AOS, Palo Alto PAN-OS. * Deep understanding of network protocols: OSPF, BGP, EIGRP, MPLS, VRF, STP, HSRP/VRRP. * Experience with automated patching toolchains: Ansible, Netmiko, NAPALM, Python (Paramiko). * Vendor firmware lifecycle knowledge including feature releases, maintenance releases, and ED/MD trains (Cisco SMU, Juniper package management). * Firewall firmware management: Palo Alto, Fortinet FortiOS, Cisco ASA/FTD upgrade procedures. * Load balancer firmware: F5 BIG-IP or Citrix ADC upgrade methodology. * Network management platforms: Cisco DNA Centre, SolarWinds NPM/NCM, NetBrain, Infoblox. * Vulnerability management: parsing Cisco PSIRT, Juniper JSA, and NVD CVE data. * ITSM integration: ServiceNow change management, CMDB for network asset tracking. * Strong risk assessment skills: balances urgency with network stability. * Excellent planning skills for complex, multi-device maintenance windows. * Strong verbal and written communication skills. * Methodical documentation detailed runbooks, RCAs, and change records. * Proactive stays current with vendor EOL/EOS notices and security advisories., * Cisco IOS. * IOS-XE. * NX-OS. * Juniper JunOS. * Aruba AOS. * Palo Alto PAN-OS. * OSPF. * BGP. * EIGRP. * MPLS. * VRF. * STP. * HSRP/VRRP. * Ansible. ## Description * Manage the firmware / software lifecycle for routers, switches, firewalls, load balancers, and wireless controllers across multi-vendor environments (Cisco, Juniper, Aruba, Palo Alto, F5, Fortinet). * Assess vendor advisories (Cisco PSIRT, Juniper JSA, Palo Alto Security Advisories) and map CVEs to required upgrades; prioritise based on business impact and CVSS score. * Develop and maintain device-specific patching runbooks including pre-check scripts, upgrade procedures, rollback steps, and post-validation checks. * Automate network patch workflows using Ansible, Netmiko, NAPALM, or vendor APIs (Cisco NSO / DNA Centre). * Lead maintenance window planning: impact analysis, rollback testing, stakeholder communication, and CAB submission. * Oversee configuration backup integrity (RANCID / Oxidised / Cisco NSO) before every patching activity. * Conduct structured rollback for failed upgrades; perform root cause analysis and document findings. * Integrate network vulnerability data from Qualys / Tenable into the patch prioritisation workflow. * Monitor network stability post-patching using NMS/IPAM tools (SolarWinds, NetBrain, Infoblox). * Act as L2 escalation for L1 patch-related issues and routing/connectivity incidents. * Produce patch compliance reports and present to network management and security teams. * Drive patching SLA adherence: Critical vulnerabilities within 72 hours, High within 14 days. Nice to Have: * SD-WAN patching exposure (Cisco Viptela, VMware VeloCloud) is advantageous., * Python. * Paramiko. * Cisco SMU. * Fortinet FortiOS. * Cisco ASA/FTD. * F5 BIG-IP. * Citrix ADC. * Cisco DNA Centre. * SolarWinds NPM/NCM. * NetBrain. * Infoblox. * ServiceNow. * CMDB. Qualification And Education: * Cisco Certified Network Professional (CCNP Enterprise or Security). * Juniper Networks Certified Professional (JNCIP-ENT or JNCIP-SEC). * Palo Alto Networks Certified Network Security Engineer (PCNSE). * CompTIA Security+ or CySA+. * ITIL 4 Foundation or Managing Professional. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Basic And Advanced Networking in Dart and Flutter](https://www.wearedevelopers.com/magazine/112-basic-and-advanced-networking-in-dart-and-flutter) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)