Purpose of this role
Reduce security risk and maintain patch compliance across Infrastructure Services using approved tooling and processes (Windows Server, Enterprise Linux, cloud/on‑prem, network devices, and assets in scope).
What You’ll Do
- Own Security Remediation Program management aligned to Security’s findings (Critical/High/Medium).
- Plan, schedule, and execute monthly OS patching (Windows/Linux) with canaries, maintenance windows, and rollback.
- Run zero-day/out‑of‑band patching with expedited assessment and change controls.
- Deliver extended remediations (cipher/protocol, file rights, 3rd‑party updates) and coordinate vendor engagement.
- Operate tooling: MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi; perform manual deployments where required.
- Manage quarterly component updates and certificate lifecycle (PKI/DigiCert), including self‑signed to PKI migration feasibility.
- Publish compliance reports, audit artifacts, and governance updates; chair weekly Security–Infrastructure standups.
What You’ll Bring
- 5+ years in infrastructure security/patch management across Windows Server & Enterprise Linux (RHEL/others).
- Hands‑on experience with MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, Venafi/PKI.
- Strong ITIL change & incident management, CMDB updates, compliance reporting.
- Scripting skills (PowerShell/Bash/Python), canary strategies, rollback procedures.
- Nice‑to‑have: ITIL v4, Security+, RHCSA/RHCE, Microsoft Certified, CCNA/CCNP, GIAC/GVM.
Skills Required
- 5+ years of infrastructure security and patch management experience across Windows Server and Enterprise Linux
- Hands-on experience with MECM/SCCM, Ansible, Rapid7, Ivanti ITSM, Cisco DNA, Panorama, and Venafi/PKI
- Strong ITIL change and incident management experience
- Experience maintaining CMDB updates and producing compliance reports
- PowerShell, Bash, and Python scripting skills
- Experience with canary strategies and rollback procedures
- ITIL v4 certification
- Security+ certification
- RHCSA or RHCE certification
- Microsoft certification
- CCNA or CCNP certification
- GIAC or GVM certification
What We Do
Fire Fighter Sales & Service Co. is a leading provider of comprehensive fire protection solutions, specializing in the design, installation, maintenance, and inspection of fire safety systems. Serving industrial and commercial organizations across the Pittsburgh tri-state area, they offer a wide array of products and services, including fire alarms, sprinklers, and suppression systems, as well as professional training and consultation to ensure life safety and property protection.
