Linux Server Patching Specialist
On-siteColombo, Western Province, Sri Lanka
Job Summary
Plan, coordinate, and execute patch deployment across the Linux server fleet, with limited support for Windows servers. Use Ansible and Foreman to automate patching, manage server lifecycle tasks, and validate patch status. Monitor vulnerability findings from Rapid7 to prioritize remediation based on severity and business impact. Maintain accurate compliance records and reporting for Cyber and IT leadership while collaborating with infrastructure and service owners to schedule changes within approved windows. Validate patches in non-production environments before wider deployment and investigate patch failures or configuration drift. Rebuild Linux servers reaching end-of-support and maintain standard operating procedures and automation playbooks. Track vendor advisories and zero-day threats to assess urgency, ensuring activities align with cybersecurity policy and compliance obligations. Support audit requests and participate in cyber incident response where urgent remediation is required.
Required Qualifications
- Proven experience in Linux server administration, patch management, vulnerability remediation, or infrastructure operations in a mid-to-large IT environment
- Strong working knowledge of common Linux distributions such as Ubuntu, Debian, Red Hat Enterprise Linux, Alma and AWS Linux, or similar enterprise Linux platforms
- Practical experience using automation and lifecycle management tools such as Ansible and Foreman for patching, configuration management, and operational control
- Working knowledge of package management tools and repositories, including apt, yum, dnf, subscription management, and patch baselining concepts
- Familiarity with Windows Server patching for a smaller server footprint, including patch validation and coordination through approved change processes
- Familiarity with vulnerability management tools, ideally Rapid7 InsightVM, and the ability to translate vulnerability findings into practical remediation actions
- Understanding of CVSS scoring, risk prioritization, compensating controls, and vulnerability lifecycle management
- Comfortable working in production server environments with a disciplined approach to change, release, rollback, and incident management
- Strong troubleshooting skills across Linux services, dependencies, patch failures, logs, and configuration drift
- Ability to work independently while collaborating effectively with infrastructure, application, cyber security, and service ownership teams
Desired Qualifications
- Master's degree preferred
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.