Senior Infrastructure Automation Engineer

Fisher Investments • Tampa, FL

23h • Onsite

About The Position

Fisher Investments is seeking a Senior Infrastructure Automation Engineer to join their Infrastructure Platform Team. This role focuses on reducing infrastructure risk by automating vulnerability remediation across the server environment. The engineer will analyze vulnerability data, prioritize findings, coordinate and perform patching, validate results, and report on remediation trends to improve patch compliance. The position reports to the Cloud Platform Team Lead.

Requirements

• 8+ years of experience in IT Infrastructure and Operations
• 5+ Years of experience in Server Management, including Windows and Linux
• Enterprise patch management and server vulnerability remediation
• Automation, playbook and role creation using tools like Ansible
• Hands-on experience with vulnerability management platforms such as Tenable/Qualys, including analyzing, prioritizing, and reporting on findings
• Experience with enterprise patching and configuration tooling (e.g. Ivanti, WSUS, SCCM / MECM, Intune, Azure Update Manager, or equivalent Linux patching tooling)
• Working knowledge of CVE and CVSS scoring, risk-based prioritization, and security compliance and audit requirements
• Proficiency in scripting languages such as Python, Bash, or PowerShell
• Bachelor's degree in MIS, computer science, or related field required or equivalent combination of education and experience

Responsibilities

• Build and maintain a standardized patching process and an end-to-end automated vulnerability remediation framework, including selection, build, and maintenance of the supporting toolset
• Design, develop, and implement Ansible playbooks and roles, and PowerShell / Python scripts, to automate patching, remediation, infrastructure provisioning, and configuration management
• Analyze vulnerability findings across the server estate; categorize, correlate, and de-duplicate findings, and prioritize remediation based on risk, exploitability, and growth
• Identify server and application ownership, and coordinate remediation activities with Information Security, Infrastructure, and application support teams
• Perform patching and vulnerability remediation across Windows and Linux server environments to validate that findings are fully closed.
• Reduce the existing vulnerability backlog and improve patch schedule to establish sustainable, measurable patch compliance
• Manage exceptions, risk acceptances, and compensating controls where remediation is not immediately achievable
• Track trends, and report remediation progress and patch compliance metrics to leadership and partners
• Perform root cause analysis on recurring vulnerabilities and identify the vulnerable software, packages, configurations, and build patterns that drive repeat findings
• Identify manual and repetitive remediation steps and eliminate them through automation, tooling, and standardization
• Improve automation, efficiency, consistency, and adherence to security / audit requirements and controls
• Collaborate with System administrators, Cloud Engineers, Infosec, and Network professionals to gather requirements and provide scalable and maintainable automation solutions
• Provide international and 24/7 support through on-call duties and working a flexible off-hours schedule for planned and unplanned maintenance

Benefits

• 100% paid medical, dental and vision premiums for you and your qualifying dependents
• A 50% 401(k) match, up to the IRS maximum
• 20 days of PTO, plus 10 paid holidays
• Family Support programs including 8 week Paid Primary Caregiver Leave, $10,000 fertility, family forming, and hormonal health assistance, and back-up child, adult, and elder care

What This Job Offers

• Job Type: Full-time
• Career Level: Senior