> Markdown version of [/jobs/ext/3531897-enterprise-infrastructure-patch-security-engineer](https://www.wearedevelopers.com/jobs/ext/3531897-enterprise-infrastructure-patch-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Enterprise Infrastructure Patch & Security Engineer

- **Company:** All Lines Technology
- **Location:** Hermitage, PA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Bash Shell, Cipher, Cloud Computing, Configuration Management Databases, Linux, Networking Hardware, Python (Programming Language), System Center Configuration Manager, Windows Servers, Public Key Infrastructure, Windows PowerShell, Red Hat Enterprise Linux, Ansible, Scripting, Patch Management, Cisco
- **Published:** October 1, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=8e7b21e5b57784d6

## About the Role

* 5+ years in infrastructure security/patch management across Windows Server & Enterprise Linux (RHEL/others).
 * Hands-on experience with MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi/PKI.
 * Strong ITIL change & incident management, CMDB updates, compliance reporting.
 * Scripting skills (PowerShell/Bash/Python), canary strategies, rollback procedures.
 * Nice-to-have: ITIL v4, Security+, RHCSA/RHCE, Microsoft Certified, CCNA/CCNP, GIAC/GVM.

## Description

* Own Security Remediation Program management aligned to Security's findings (Critical/High/Medium).
 * Plan, schedule, and execute monthly OS patching (Windows/Linux) with canaries, maintenance windows, and rollback.
 * Run zero-day/out-of-band patching with expedited assessment and change controls.
 * Deliver extended remediations (cipher/protocol, file rights, 3rd-party updates) and coordinate vendor engagement.
 * Operate tooling: MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi; perform manual deployments where required.
 * Manage quarterly component updates and certificate lifecycle (PKI/DigiCert), including self-signed to PKI migration feasibility.
 * Publish compliance reports, audit artifacts, and governance updates; chair weekly Security-Infrastructure standups.