Infrastructure Patch Management Engineer

Position: Application Infrastructure Patch Management Engineer
Job Overview:
Requirement/Must Have:
Advanced Windows Server administration (2016/2019/2022): roles, features, update mechanisms (CBS, WUA). Strong Linux skills: RPM/YUM/DNF on RHEL; APT on Ubuntu; patch lifecycle, kernel updates, reboot management. Deep expertise in patch tooling: WSUS / SCCM SUP, Red Hat Satellite, Ansible Tower/AWX. Advanced Power Shell and Bash scripting; experience with Ansible YAML playbooks. Virtualisation: VMware vSphere (vCenter, ESXi), Hyper-V snapshot workflows and patching order (hosts before guests).

Cloud exposure: AWS SSM Patch Manager or Azure Update Manager for hybrid environments. Vulnerability management:
Qualys, Tenable Nessus/SC, mapping CVEs to patch remediation. ITSM:
Service Now change management, CMDB, and automated ticket creation. Understanding of storage (SAN/NAS) and cluster patching procedures (Windows Failover Cluster, RHEL HA). Strong analytical skills to diagnose complex patch failures across layered infrastructure. Excellent planning and co-ordination skills for large-scale maintenance windows. Strong verbal and written communication skills. Risk-aware mindset balances security urgency with operational stability. Self-driven; proactively identifies tooling gaps and implements improvements.

Responsibilities:
Manage the end-to-end patch management lifecycle for Windows Server and Linux (RHEL/Ubuntu/SUSE) environments. Maintain and optimise patch management tooling: WSUS, SCCM SUP, Red Hat Satellite, Ansible, or similar. Develop and maintain automation scripts (Power Shell, Bash, Ansible playbooks) for patch orchestration, pre/post-checks, and compliance reporting. Analyse vulnerability scan outputs (Qualys, Tenable) and map CVEs to required patches; prioritise based on CVSS and business criticality.

Design and maintain patching runbooks, maintenance window procedures, and rollback plans for server environments. Oversee VMware vSphere / Hyper-V snapshot and backup verification before patching; manage rollback in failure scenarios. Co-ordinate with application, DBA, and storage teams to ensure application-consistent patching with zero unplanned downtime. Drive patch compliance metrics towards defined SLAs (Critical: 72 hrs, High: 7 days, Medium: 30 days).

Act as L2 escalation point for patch-related incidents; conduct root cause analysis and implement corrective actions. Maintain CMDB accuracy for server patch status and configuration baseline. Present patch compliance dashboards and trend reports to management and security teams. Mentor L1 analysts and support onboarding of new team members. Nice to Have:
Red Hat Certified Engineer (RHCE). Microsoft Certified:
Windows Server Hybrid Administrator Associate (AZ-800/AZ-801). VMware Certified Professional Data Center Virtualisation (VCP-DCV). CompTIA Security+ or CySA+. AWS Certified Sys Ops Administrator or Microsoft Azure Administrator (AZ-104). ITIL 4 Foundation or Managing Professional.

Skills:

Datacenter. Patch Management. Windows Server. Linux (RHEL/Ubuntu/SUSE). WSUS. SCCM SUP. Red Hat Satellite. Ansible. Power Shell. Bash. VMware vSphere. Hyper-V. AWS SSM Patch Manager. Azure Update Manager. Qualys. Tenable. Service Now. Qualification And

Education:

03 - 06+ years of experience in Data Center Patch Management or related infrastructure roles. Benefits:
Our Benefits Include:
Medical, Dental, and Vision Insurance 401(k) Retirement Plan Health Savings Account (HSA) Disability Insurance (Short-Term and Long-Term) Life and AD&D Insurance Paid Sick Leave (where required by applicable state or local law) Supplemental Insurance Plans Identity Theft Protection Pet Insurance Employee Wellness Programs Employee Assistance Program (EAP) Career Growth and Professional Development Opportunities

Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws. About Cynet Systems Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc.

is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia. As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers.

Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and…