Infrastructure Engineer II

Role overview

Infrastructure Engineer II at American Express

The ideal candidate will have extensive experience managing enterprise-wide patching operations, remediating security vulnerabilities, troubleshooting complex infrastructure issues, and driving automation to improve patch compliance and operational efficiency.

Responsibilities

• Manage monthly, emergency, and out-of-band security patching cycles across production and non-production environments.
• Ensure patching activities are executed within approved maintenance windows with minimal business disruption.
• Develop patch rollback, recovery, and contingency procedures to minimize operational risks.
• Manage Windows Server patching using Microsoft Configuration Manager (SCCM/MECM), WSUS, or equivalent enterprise patching platforms.
• Support VMware ESXi and vCenter patching, upgrades, lifecycle management, and security remediation.
• Perform server health checks, pre-patching readiness assessments, and post-patching validation.
• Support operating system upgrades, end-of-life remediation, server migrations, and infrastructure modernization.
• Analyze vulnerability scan results from tools such as Qualys, Tenable, Rapid7, or equivalent enterprise security platforms.
• Implement security hardening recommendations based on CIS benchmarks, vendor guidance, and enterprise security standards.
• Support vulnerability exception management, risk acceptance processes, and remediation tracking.
• Drive continuous improvement initiatives to reduce vulnerability exposure and infrastructure security risk.
• Develop automation scripts using Python, Bash, PowerShell, and Ansible.
• Implement Ansible playbooks for Linux patching, server configuration, security hardening, and vulnerability remediation.
• Develop reusable scripts and automation frameworks to reduce manual intervention and improve patching consistency.
• Monitor patch deployment status, remediation progress, patch failures, and outstanding security vulnerabilities.
• Ensure infrastructure patching activities align with enterprise security policies, regulatory requirements, and internal audit standards.
• Support security audits by providing patching evidence, remediation documentation, and compliance reports.
• Manage patching exceptions, risk assessments, and remediation timelines in coordination with cybersecurity and risk teams.
• Drive improvements in patch coverage, patch success rates, vulnerability remediation SLAs, and overall security posture.
• Perform proactive infrastructure health checks, monitoring, and performance optimization.
• Support production change implementation, maintenance activities, and emergency security patch deployments.
• Develop and maintain operational runbooks, patching procedures, troubleshooting guides, and technical documentation.

Required qualifications

• Required Experience & Technical Skills 7 years of overall IT infrastructure, system administration, patch management, or infrastructure security engineering experience.

Preferred qualifications and skills

• Red Hat Certified System Administrator (RHCSA) or Red Hat Certified Engineer (RHCE).
• Microsoft Windows Server or infrastructure certification.
• Red Hat Ansible Automation certification.
• Experience with Red Hat Satellite, Ansible Automation Platform, Microsoft Configuration Manager, and enterprise patch orchestration solutions.
• Familiarity with ServiceNow, CMDB, change management, and automated patch compliance reporting.
• Knowledge of CIS benchmarks, NIST security frameworks, and enterprise security compliance requirements.
• Experience implementing automated vulnerability remediation and infrastructure security controls.

Employment details

• Location: Gurugram [HR] [India]

Application details

• Collaborate with infrastructure, application, cybersecurity, and change management teams to ensure timely patch deployment and compliance.
• Coordinate with application owners and infrastructure teams to resolve vulnerabilities requiring application compatibility testing or planned downtime.
• Troubleshoot complex operating system, patching, application compatibility, performance, and availability issues.

About the employer

• The team is responsible for maintaining secure and compliant Red Hat Linux, Windows environments by implementing enterprise patching strategies, addressing security vulnerabilities, reducing infrastructure risk, and ensuring adherence to organizational security standards.

Additional role details

• The Infrastructure Patching & Security Engineering team ensures the security, stability, compliance, and operational resilience of enterprise infrastructure platforms through proactive patch management, vulnerability remediation, security hardening, automation, and continuous improvement.
• We are seeking an experienced Infrastructure Engineer with strong hands-on expertise in Red Hat Enterprise Linux (RHEL), Windows Server, VMware, system administration, OS patching, vulnerability management, infrastructure security, automation, and scripting.
• OS Patching & Infrastructure Security Operations Plan, coordinate, execute, and manage enterprise-wide operating system patching across Red Hat Linux and Windows infrastructure.
• Own end-to-end patch management activities, including patch assessment, planning, testing, deployment, validation, reporting, and remediation.
• Implement security patches, critical updates, kernel upgrades, and operating system fixes in accordance with enterprise security policies.
• Identify and remediate missing patches, outdated software packages, and infrastructure security vulnerabilities.
• Troubleshoot patch installation failures, dependency conflicts, repository issues, reboot failures, and post-patching system issues.
• Red Hat Linux, Windows & VMware Administration Build, configure, administer, maintain, and troubleshoot enterprise Red Hat Enterprise Linux and Windows Server environments.
• Perform Linux patching using YUM, DNF, RPM, Red Hat Satellite, and related patch management tools.
• Troubleshoot Linux kernel issues, package dependencies, system services, boot failures, filesystem issues, and OS performance degradation.
• Administer Windows Server infrastructure, including Active Directory, Group Policy, DNS, DHCP, and Windows Update services.
• Vulnerability Management & Security Remediation Partner with cybersecurity and vulnerability management teams to identify, assess, prioritize, and remediate infrastructure vulnerabilities.
• Remediate critical and high-severity vulnerabilities within defined security SLAs.
• Investigate vulnerabilities associated with operating systems, software packages, system configurations, and infrastructure components.
• Address security findings related to outdated packages, insecure protocols, weak configurations, unsupported operating systems, and missing security patches.
• Maintain accurate vulnerability remediation records, compliance evidence, and audit documentation.
• Patching Automation & Scripting Design, develop, and maintain automation solutions for enterprise infrastructure patching and security remediation.
• Automate Linux and Windows patch deployment, patch validation, compliance checks, and operational reporting.
• Automate patch readiness checks, server reboot coordination, service validation, and post-patching health checks.
• Integrate patching workflows with enterprise automation, orchestration, and IT service management platforms.
• Troubleshoot automation failures and continuously optimize patch deployment workflows.
• Identify opportunities to improve patch success rates, reduce patching cycle times, and increase infrastructure compliance through automation.
• Patch Compliance, Governance & Reporting Track and maintain infrastructure patch compliance across Linux, Windows, and VMware platforms.
• Generate patch compliance dashboards, vulnerability remediation reports, and operational metrics.
• Identify systems that are non-compliant, unsupported, or approaching end of life and develop remediation plans.
• Infrastructure Support & Incident Management Provide advanced L2/L3 technical support for Linux, Windows, VMware, and infrastructure patching platforms.
• Participate in major incident management, root cause analysis (RCA), and problem management activities.
• Investigate infrastructure incidents caused by failed patches, operating system updates, configuration changes, or security remediation.
• Coordinate with application, database, network, storage, security, and infrastructure engineering teams to resolve cross-platform issues.
• Participate in on-call support and scheduled maintenance activities to ensure critical infrastructure availability.
• Strong hands-on experience managing enterprise-wide operating system patching and vulnerability remediation across large-scale infrastructure environments.
• Extensive expertise in Red Hat Enterprise Linux (RHEL 7/8/9 or later), including administration, patching, kernel upgrades, troubleshooting, and security hardening.
• Strong hands-on experience with Windows Server 2016/2019/2022 or later, including administration, security updates, patch deployment, and troubleshooting.
• Strong experience with VMware vSphere, ESXi, vCenter, virtualization management, patching, and lifecycle operations.
• Hands-on experience with Linux patch management tools such as Red Hat Satellite, YUM, DNF, and RPM.
• Experience with Windows patch management platforms such as SCCM/MECM, WSUS, or equivalent enterprise tools.
• Strong understanding of vulnerability management processes and remediation using tools such as Qualys, Tenable, Rapid7, or equivalent platforms.
• Strong experience with infrastructure automation and configuration management using Ansible.
• Hands-on scripting experience using Python, Bash/Shell scripting, and PowerShell.
• Strong understanding of operating system security hardening, CIS benchmarks, vulnerability remediation, and patch compliance.
• Experience managing critical and high-severity security vulnerabilities and meeting defined remediation SLAs.
• Good understanding of enterprise networking concepts, including TCP/IP, DNS, DHCP, routing, firewalls, and connectivity troubleshooting.
• Knowledge of enterprise storage technologies, filesystems, and infrastructure performance management.
• Experience with patching governance, change management, incident management, and ITIL processes.
• Strong troubleshooting skills across operating systems, infrastructure security, patching platforms, VMware, networking, and storage.
• Experience supporting large-scale production infrastructure in highly regulated environments.
• Strong communication, documentation, analytical, and cross-functional collaboration skills.