Infrastructure Engineer III at American Express in Bengaluru, KA

Job description

The Infrastructure Patching & Security Engineering team ensures the security, stability, compliance, and operational resilience of enterprise infrastructure platforms through proactive patch management, vulnerability remediation, security hardening, automation, and continuous improvement. The team is responsible for maintaining secure and compliant Red Hat Linux, Windows environments by implementing enterprise patching strategies, addressing security vulnerabilities, reducing infrastructure risk, and ensuring adherence to organizational security standards. We are seeking an experienced Infrastructure Engineer with strong hands-on expertise in Red Hat Enterprise Linux (RHEL), Windows Server, VMware, system administration, OS patching, vulnerability management, infrastructure security, automation, and scripting. The ideal candidate will have extensive experience managing enterprise-wide patching operations, remediating security vulnerabilities, troubleshooting complex infrastructure issues, and driving automation to improve patch compliance and operational efficiency. OS Patching & Infrastructure Security Operations Plan, coordinate, execute, and manage enterprise-wide operating system patching across Red Hat Linux and Windows infrastructure. Own end-to-end patch management activities, including patch assessment, planning, testing, deployment, validation, reporting, and remediation. Manage monthly, emergency, and out-of-band security patching cycles across production and non-production environments. Implement security patches, critical updates, kernel upgrades, and operating system fixes in accordance with enterprise security policies. Identify and remediate missing patches, outdated software packages, and infrastructure security vulnerabilities. Troubleshoot patch installation failures, dependency conflicts, repository issues, reboot failures, and post-patching system issues. Ensure patching activities are executed within approved maintenance windows with minimal business disruption. Develop patch rollback, recovery, and contingency procedures to minimize operational risks. Collaborate with infrastructure, application, cybersecurity, and change management teams to ensure timely patch deployment and compliance. Red Hat Linux, Windows & VMware Administration Build, configure, administer, maintain, and troubleshoot enterprise Red Hat Enterprise Linux and Windows Server environments. Perform Linux patching using YUM, DNF, RPM, Red Hat Satellite, and related patch management tools. Manage Windows Server patching using Microsoft Configuration Manager (SCCM/MECM), WSUS, or equivalent enterprise patching platforms. Support VMware ESXi and vCenter patching, upgrades, lifecycle management, and security remediation. Troubleshoot Linux kernel issues, package dependencies, system services, boot failures, filesystem issues, and OS performance degradation. Administer Windows Server infrastructure, including Active Directory, Group Policy, DNS, DHCP, and Windows Update services. Perform server health checks, pre-patching readiness assessments, and post-patching validation. Support operating system upgrades, end-of-life remediation, server migrations, and infrastructure modernization. Vulnerability Management & Security Remediation Partner with cybersecurity and vulnerability management teams to identify, assess, prioritize, and remediate infrastructure vulnerabilities. Analyze vulnerability scan results from tools such as Qualys, Tenable, Rapid7, or equivalent enterprise security platforms. Remediate critical and high-severity vulnerabilities within defined security SLAs. Investigate vulnerabilities associated with operating systems, software packages, system configurations, and infrastructure components. Implement security hardening recommendations based on CIS benchmarks, vendor guidance, and enterprise security standards. Address security findings related to outdated packages, insecure protocols, weak configurations, unsupported operating s