> Markdown version of [/jobs/ext/612445-lead-enterprise-infrastructure-patch-and-security-engineer](https://www.wearedevelopers.com/jobs/ext/612445-lead-enterprise-infrastructure-patch-and-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Enterprise Infrastructure Patch and Security Engineer

- **Company:** All Lines Technology
- **Location:** Hermitage, PA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Bash Shell, Cipher, Cloud Computing, Configuration Management Databases, File System Permissions, Networking Hardware, Python (Programming Language), Linux System Administration, System Center Configuration Manager, Windows Servers, Public Key Infrastructure, Windows PowerShell, Red Hat Enterprise Linux, Ansible, Scripting, Patch Management, Cisco
- **Published:** June 18, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=94c93321db48ce6c

## About the Role

* 5+ years of experience in infrastructure security and patch management.
 * Strong expertise in Windows Server and Enterprise Linux environments (e.g., RHEL).
 * Hands-on experience with enterprise tools such as MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, and Venafi/PKI.
 * Solid understanding of ITIL processes, including change management, incident management, and CMDB maintenance.
 * Experience with compliance reporting and audit support.
 * Scripting proficiency in PowerShell, Bash, or Python.
 * Demonstrated experience with canary deployments and rollback procedures.

## Description

We are seeking a highly skilled Lead Infrastructure Security & Patch Management Engineer to reduce security risk and maintain patch compliance across Infrastructure Services. This role is responsible for managing enterprise-wide remediation efforts using approved tools and processes across Windows Server, Enterprise Linux, cloud and on-prem environments, network devices, and other in-scope assets., * Own and manage the Security Remediation Program, ensuring alignment with Security findings (Critical, High, Medium).

 * Plan, schedule, and execute monthly operating system patching for Windows and Linux environments, including canary deployments, defined maintenance windows, and rollback strategies.
 * Lead zero-day and out-of-band patching efforts with expedited risk assessment and adherence to change control processes.
 * Deliver extended remediation activities, including updates to ciphers, protocols, file permissions, and third-party applications; coordinate with vendors as needed.
 * Administer and operate enterprise patching and security tooling, including MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, and Venafi, with manual deployments when required.
 * Manage quarterly component updates and oversee certificate lifecycle processes (PKI/DigiCert), including feasibility analysis for migrations from self-signed to PKI certificates.
 * Develop and publish compliance reports, audit documentation, and governance updates.
 * Facilitate and lead weekly Security-Infrastructure standups to track remediation progress and address risks.


## Related Videos

- [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)
- [Eclipse Che for Infrastructure Automation](https://www.wearedevelopers.com/videos/1611-eclipse-che-for-infrastructure-automation)
- [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)