Senior Infrastructure Automation Engineer

Fisher Investments • Camas, WA

1d • $130,000 - $175,000 • Onsite

About The Position

It's an exciting time to join Fisher Investments; we're investing in the future of our firm's technology and information security. Our business is growing internationally, which emphasizes the need to build an unparalleled team that promotes future global growth through strategic solutions and progress. We are looking for a Senior Infrastructure Automation Engineer to join our Infrastructure Platform Team and assist us in supporting and maintaining our Platform.
The Opportunity:
The Senior Infrastructure Automation Engineer reduces infrastructure risk by remediating vulnerabilities across the server environment and eliminating their causes through automation. You will analyze vulnerability data, prioritize findings based on risk, coordinate and perform patching, validate results, and report on remediation trends to reverse the current vulnerability trend and establish sustainable patch compliance. You will report to the Cloud Platform Team Lead.
The Day-to-Day:
Build and maintain a standardized patching process and an end-to-end automated vulnerability remediation framework, including selection, build, and maintenance of the supporting toolset
Design, develops, and implements Ansible playbooks and roles, and PowerShell / Python scripts, to automate patching, remediation, infrastructure provisioning, and configuration management
Analyze vulnerability findings across the server estate; categorize, correlates, and de-duplicates findings, and prioritizes remediation based on risk, exploitability, and growth
Identify server and application ownership, and coordinate remediation activities with Information Security, Infrastructure, and application support teams
Perform patching and vulnerability remediation across Windows and Linux server environments to validate that findings are fully closed.
Reduce the existing vulnerability backlog and improve patch schedule to establish sustainable, measurable patch compliance
Manage exceptions, risk acceptances, and compensating controls where remediation is not immediately achievable
Track trends, and reports remediation progress and patch compliance metrics to leadership and partners
Perform root cause analysis on recurring vulnerabilities and identify the vulnerable software, packages, configurations, and build patterns that drive repeat findings
Identify manual and repetitive remediation steps and eliminate them through automation, tooling, and standardization
Improve automation, efficiency, consistency, and adherence to security / audit requirements and controls
Collaborate with System administrators, Cloud Engineers, Infosec, and Network professionals to gather requirements and provide scalable and maintainable automation solutions
Provide international and 24/7 support through on-call duties and working a flexible off-hours schedule for planned and unplanned maintenance

Requirements

• 8+ years of experience in IT Infrastructure and Operations
• 5+ Years of experience in Server Management, including Windows and Linux
• 5+ Years of experience in Enterprise patch management and server vulnerability remediation
• 5+ Years of experience in Automation, playbook and role creation using tools like Ansible
• Hands-on experience with vulnerability management platforms such as Tenable/Qualys, including analyzing, prioritizing, and reporting on findings
• Experience with enterprise patching and configuration tooling (e.g. Ivanti, WSUS, SCCM / MECM, Intune, Azure Update Manager, or equivalent Linux patching tooling)
• Working knowledge of CVE and CVSS scoring, risk-based prioritization, and security compliance and audit requirements
• Proficiency in scripting languages such as Python, Bash, or PowerShell
• Bachelor's degree in MIS, computer science, or related field required or equivalent combination of education and experience

Responsibilities

• Build and maintain a standardized patching process and an end-to-end automated vulnerability remediation framework, including selection, build, and maintenance of the supporting toolset
• Design, develops, and implements Ansible playbooks and roles, and PowerShell / Python scripts, to automate patching, remediation, infrastructure provisioning, and configuration management
• Analyze vulnerability findings across the server estate; categorize, correlates, and de-duplicates findings, and prioritizes remediation based on risk, exploitability, and growth
• Identify server and application ownership, and coordinate remediation activities with Information Security, Infrastructure, and application support teams
• Perform patching and vulnerability remediation across Windows and Linux server environments to validate that findings are fully closed.
• Reduce the existing vulnerability backlog and improve patch schedule to establish sustainable, measurable patch compliance
• Manage exceptions, risk acceptances, and compensating controls where remediation is not immediately achievable
• Track trends, and reports remediation progress and patch compliance metrics to leadership and partners
• Perform root cause analysis on recurring vulnerabilities and identify the vulnerable software, packages, configurations, and build patterns that drive repeat findings
• Identify manual and repetitive remediation steps and eliminate them through automation, tooling, and standardization
• Improve automation, efficiency, consistency, and adherence to security / audit requirements and controls
• Collaborate with System administrators, Cloud Engineers, Infosec, and Network professionals to gather requirements and provide scalable and maintainable automation solutions
• Provide international and 24/7 support through on-call duties and working a flexible off-hours schedule for planned and unplanned maintenance

Benefits

• 100% paid medical, dental and vision premiums for you and your qualifying dependents
• A 50% 401(k) match, up to the IRS maximum
• 20 days of PTO, plus 10 paid holidays
• Family Support programs including 8 week Paid Primary Caregiver Leave, $10,000 fertility, family forming, and hormonal health assistance, and back-up child, adult, and elder care
• Eligible for a discretionary bonus based on firm and individual performance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior