Infrastructure SME

Project description

We are seeking an experienced Infrastructure SME to strengthen the teams responsible for the planning, coordination, deployment, and governance of security patches across the bank's core infrastructure estate. The role will provide technical leadership to ensure critical security updates are delivered efficiently while minimising operational risk and maintaining service availability.

The successful candidate will possess deep infrastructure expertise across Windows, Linux, virtualisation, cloud, middleware, networking, storage, and enterprise platforms, with extensive experience managing large-scale patching programmes within highly regulated environments.

• 1. Security Patch Management Lead the planning, scheduling, deployment, and governance of security patches across the bank's core infrastructure.
  
  Assess security vulnerabilities and determine patching priorities based on risk, criticality, and regulatory requirements.
  
  Coordinate monthly and emergency patch cycles across multiple technology domains.
  
  Validate patch deployment success and ensure remediation of failed or incomplete installations.
  
  Support vulnerability remediation programmes and ensure timely closure of security findings.
  2. Core Infrastructure SMEProvide technical leadership across enterprise infrastructure including:
  
  Windows Server Linux / UNIXVMware / Hyper-V virtualisation
  
  Active DirectoryDNS / DHCPStorage platforms (SAN/NAS)
  Enterprise backup and recovery
  
  Middleware and supporting infrastructure
  
  Cloud platforms (Azure, AWS)
  Network infrastructure supporting core services
  3. Infrastructure Operations & Reliability Maintain high availability and operational stability throughout patch deployment activities.
  
  Develop rollback and recovery strategies for infrastructure changes.
  
  Perform impact assessments and risk analysis before production deployments.
  
  Support major incidents arising from infrastructure changes and security patching activities.
  4. Vulnerability & Security Management Work closely with Cyber Security and Vulnerability Management teams to prioritise remediation activities.
  
  Analyse vulnerability scan results and recommend appropriate remediation strategies.
  
  Ensure compliance with internal security policies, patch SLAs, and regulatory requirements.
  
  Support security audits and infrastructure compliance assessments.
  5. Change & Release Management Lead infrastructure changes through established Change Management processes.
  
  Prepare implementation plans, technical documentation, rollback procedures, and post-implementation reviews.
  
  Coordinate deployment activities across infrastructure, application, security, and operations teams.
  
  Ensure changes are delivered with minimal disruption to business services.
  6. Automation & Continuous Improvement Identify opportunities to automate patch deployment and infrastructure maintenance activities.
  
  Improve operational processes through scripting, orchestration, and infrastructure automation.
  
  Enhance infrastructure monitoring, reporting, and compliance dashboards.
  
  Drive continual improvements in patching efficiency, quality, and operational resilience.
  7. Stakeholder Management Collaborate with Infrastructure, Cyber Security, Operations, Architecture, Application Support, and Change Management teams.
  
  Provide technical guidance during security reviews, infrastructure projects, and major incident investigations.
  
  Communicate infrastructure risks, patch status, and remediation plans to technical and management stakeholders.

• MUST HAVE: SME experience in security patch deployment within Infrastructure Core Infrastructure Expertise Strong experience supporting enterprise infrastructure within banking or other highly regulated environments.
  
  Deep knowledge of Windows Server and Linux administration.
  
  Experience with VMware, Hyper-V, and enterprise virtualisation technologies.
  
  Strong understanding of Active Directory, DNS, DHCP, PKI, and identity infrastructure.
  
  Experience with storage, backup, disaster recovery, and high-availability solutions.
  
  Infrastructure Security Extensive experience delivering enterprise security patching programmes.
  
  Strong understanding of vulnerability management and remediation processes.
  
  Familiarity with CVSS scoring, vulnerability assessment, and risk-based patch prioritisation.
  
  Experience with endpoint and server hardening aligned to security best practices.
  
  Cloud & Modern Infrastructure Experience supporting Azure and/or AWS infrastructure.
  
  Understanding of hybrid cloud environments and cloud security controls.
  
  Knowledge of Infrastructure as Code (IaC) concepts and automation tooling.
  
  Automation & Tooling
  
  Experience with one or more of:
  
  Microsoft SCCM / MECMMicrosoft IntuneWSUSRed Hat Satellite Ansible Puppet Chef Power Shell Bash Python VMware vCenter
  
  Azure Update Manager AWS Systems Manager (SSM)
  Infrastructure Technologies Network infrastructure (TCP/IP, firewalls, load balancers, switches, routing)
  Storage technologies
  
  Virtualisation platforms
  
  Monitoring tools (Solar Winds,…