{"id":2606969,"url":"https://alion.io/job/american-express-infrastructure-engineer-ii","title":"Infrastructure Engineer II","company":{"id":2209,"name":"American Express","domain":"americanexpress.com","url":"https://alion.io/company/american-express","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":100,"open_postings":53,"ghost_share":0,"stale_share":0.057,"repost_share":0.189,"time_to_fill_p50_days":7,"computed_at":"2026-10-16T05:45:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":11000,"max_usd":29000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":23},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Ansible","optional":false},{"name":"Bash","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Configuration Management","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Incident Management","optional":false},{"name":"ITIL","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Red Hat","optional":false},{"name":"TCP/IP","optional":false},{"name":"VMWare","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-15T05:42:32Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-16T03:57:06Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"The Infrastructure Patching & Security Engineering team ensures the security, stability, compliance, and operational resilience of enterprise infrastructure platforms through proactive patch management, vulnerability remediation, security hardening, automation, and continuous improvement.\nThe team is responsible for maintaining secure and compliant Red Hat Linux, Windows environments by implementing enterprise patching strategies, addressing security vulnerabilities, reducing infrastructure risk, and ensuring adherence to organizational security standards.\nWe are seeking an experienced Infrastructure Engineer with strong hands-on expertise in Red Hat Enterprise Linux (RHEL), Windows Server, VMware, system administration, OS patching, vulnerability management, infrastructure security, automation, and scripting. The ideal candidate will have extensive experience managing enterprise-wide patching operations, remediating security vulnerabilities, troubleshooting complex infrastructure issues, and driving automation to improve patch compliance and operational efficiency.\n OS Patching & Infrastructure Security Operations\nPlan, coordinate, execute, and manage enterprise-wide operating system patching across Red Hat Linux and Windows infrastructure.\nOwn end-to-end patch management activities, including patch assessment, planning, testing, deployment, validation, reporting, and remediation.\nManage monthly, emergency, and out-of-band security patching cycles across production and non-production environments.\nImplement security patches, critical updates, kernel upgrades, and operating system fixes in accordance with enterprise security policies.\nIdentify and remediate missing patches, outdated software packages, and infrastructure security vulnerabilities.\nTroubleshoot patch installation failures, dependency conflicts, repository issues, reboot failures, and post-patching system issues.\nEnsure patching activities are executed within approved maintenance windows with minimal business disruption.\nDevelop patch rollback, recovery, and contingency procedures to minimize operational risks.\nCollaborate with infrastructure, application, cybersecurity, and change management teams to ensure timely patch deployment and compliance.\nRed Hat Linux, Windows & VMware Administration\nBuild, configure, administer, maintain, and troubleshoot enterprise Red Hat Enterprise Linux and Windows Server environments.\nPerform Linux patching using YUM, DNF, RPM, Red Hat Satellite, and related patch management tools.\nManage Windows Server patching using Microsoft Configuration Manager (SCCM/MECM), WSUS, or equivalent enterprise patching platforms.\nSupport VMware ESXi and vCenter patching, upgrades, lifecycle management, and security remediation.\nTroubleshoot Linux kernel issues, package dependencies, system services, boot failures, filesystem issues, and OS performance degradation.\nAdminister Windows Server infrastructure, including Active Directory, Group Policy, DNS, DHCP, and Windows Update services.\nPerform server health checks, pre-patching readiness assessments, and post-patching validation.\nSupport operating system upgrades, end-of-life remediation, server migrations, and infrastructure modernization.\nVulnerability Management & Security Remediation\nPartner with cybersecurity and vulnerability management teams to identify, assess, prioritize, and remediate infrastructure vulnerabilities.\nAnalyze vulnerability scan results from tools such as Qualys, Tenable, Rapid7, or equivalent enterprise security platforms.\nRemediate critical and high-severity vulnerabilities within defined security SLAs.\nInvestigate vulnerabilities associated with operating systems, software packages, system configurations, and infrastructure components.\nImplement security hardening recommendations based on CIS benchmarks, vendor guidance, and enterprise security standards.\nAddress security findings related to outdated packages, insecure protocols, weak configurations, unsupported operating systems, and missing security patches.\nSupport vulnerability exception management, risk acceptance processes, and remediation tracking.\nCoordinate with application owners and infrastructure teams to resolve vulnerabilities requiring application compatibility testing or planned downtime.\nMaintain accurate vulnerability remediation records, compliance evidence, and audit documentation.\nDrive continuous improvement initiatives to reduce vulnerability exposure and infrastructure security risk.\nPatching Automation & Scripting\nDesign, develop, and maintain automation solutions for enterprise infrastructure patching and security remediation.\nAutomate Linux and Windows patch deployment, patch validation, compliance checks, and operational reporting.\nDevelop automation scripts using Python, Bash, PowerShell, and Ansible.\nImplement Ansible playbooks for Linux patching, server configuration, security hardening, and vulnerability remediation.\nAutomate patch readiness checks, server reboot coordination, service validation, and post-patching health checks.\nIntegrate patching workflows with enterprise automation, orchestration, and IT service management platforms.\nDevelop reusable scripts and automation frameworks to reduce manual intervention and improve patching consistency.\nTroubleshoot automation failures and continuously optimize patch deployment workflows.\nIdentify opportunities to improve patch success rates, reduce patching cycle times, and increase infrastructure compliance through automation.\nPatch Compliance, Governance & Reporting\nTrack and maintain infrastructure patch compliance across Linux, Windows, and VMware platforms.\nMonitor patch deployment status, remediation progress, patch failures, and outstanding security vulnerabilities.\nGenerate patch compliance dashboards, vulnerability remediation reports, and operational metrics.\nEnsure infrastructure patching activities align with enterprise security policies, regulatory requirements, and internal audit standards.\nSupport security audits by providing patching evidence, remediation documentation, and compliance reports.\nIdentify systems that are non-compliant, unsupported, or approaching end of life and develop remediation plans.\nManage patching exceptions, risk assessments, and remediation timelines in coordination with cybersecurity and risk teams.\nDrive improvements in patch coverage, patch success rates, vulnerability remediation SLAs, and overall security posture.\nInfrastructure Support & Incident Management\nProvide advanced L2/L3 technical support for Linux, Windows, VMware, and infrastructure patching platforms.\nTroubleshoot complex operating system, patching, application compatibility, performance, and availability issues.\nParticipate in major incident management, root cause analysis (RCA), and problem management activities.\nInvestigate infrastructure incidents caused by failed patches, operating system updates, configuration changes, or security remediation.\nCoordinate with application, database, network, storage, security, and infrastructure engineering teams to resolve cross-platform issues.\nPerform proactive infrastructure health checks, monitoring, and performance optimization.\nSupport production change implementation, maintenance activities, and emergency security patch deployments.\nDevelop and maintain operational runbooks, patching procedures, troubleshooting guides, and technical documentation.\nParticipate in on-call support and scheduled maintenance activities to ensure critical infrastructure availability.\n Required Experience & Technical Skills\n7 years of overall IT infrastructure, system administration, patch management, or infrastructure security engineering experience.\nStrong hands-on experience managing enterprise-wide operating system patching and vulnerability remediation across large-scale infrastructure environments.\nExtensive expertise in Red Hat Enterprise Linux (RHEL 7/8/9 or later), including administration, patching, kernel upgrades, troubleshooting, and security hardening.\nStrong hands-on experience with Windows Server 2016/2019/2022 or later, including administration, security updates, patch deployment, and troubleshooting.\nStrong experience with VMware vSphere, ESXi, vCenter, virtualization management, patching, and lifecycle operations.\nHands-on experience with Linux patch management tools such as Red Hat Satellite, YUM, DNF, and RPM.\nExperience with Windows patch management platforms such as SCCM/MECM, WSUS, or equivalent enterprise tools.\nStrong understanding of vulnerability management processes and remediation using tools such as Qualys, Tenable, Rapid7, or equivalent platforms.\nStrong experience with infrastructure automation and configuration management using Ansible.\nHands-on scripting experience using Python, Bash/Shell scripting, and PowerShell.\nStrong understanding of operating system security hardening, CIS benchmarks, vulnerability remediation, and patch compliance.\nExperience managing critical and high-severity security vulnerabilities and meeting defined remediation SLAs.\nGood understanding of enterprise networking concepts, including TCP/IP, DNS, DHCP, routing, firewalls, and connectivity troubleshooting.\nKnowledge of enterprise storage technologies, filesystems, and infrastructure performance management.\nExperience with patching governance, change management, incident management, and ITIL processes.\nStrong troubleshooting skills across operating systems, infrastructure security, patching platforms, VMware, networking, and storage.\nExperience supporting large-scale production infrastructure in highly regulated environments.\nStrong communication, documentation, analytical, and cross-functional collaboration skills.\nPreferred Qualifications\nRed Hat Certified System Administrator (RHCSA) or Red Hat Certified Engineer (RHCE).\nMicrosoft Windows Server or infrastructure certification.\nRed Hat Ansible Automation certification.\nExperience with Red Hat Satellite, Ansible Automation Platform, Microsoft Configuration Manager, and enterprise patch orchestration solutions.\nFamiliarity with ServiceNow, CMDB, change management, and automated patch compliance reporting.\nKnowledge of CIS benchmarks, NIST security frameworks, and enterprise security compliance requirements.\nExperience implementing automated vulnerability remediation and infrastructure security controls.","description_format":"text","description_chars":10372,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Cards & Card Issuing","Payment Processing & Gateways","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-10-15T10:03:36Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":7,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/american-express-infrastructure-engineer-ii","json_url":"https://alion.io/job/american-express-infrastructure-engineer-ii.json","meta":{"generated_at":"2026-10-16T07:54:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5813,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2209},"rest":"https://alion.io/mcp/rest/get_company?id=2209"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famerican-express-infrastructure-engineer-ii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famerican-express-infrastructure-engineer-ii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famerican-express-infrastructure-engineer-ii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/american-express-infrastructure-engineer-ii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famerican-express-infrastructure-engineer-ii"}]}