Senior Infrastructure Automation Engineer Fisher Investments - 3.4 Plano, TX Job Details Full-time 21 hours ago Benefits Caregiver leave Paid holidays Health insurance Dental insurance Paid time off Work from home Vision insurance 401(k) matching Qualifications Vulnerability scanning implementation Linux support Tooling Regulatory compliance Configuration management Operating system updates Automating deployment processes IT infrastructure Programming languages Patch management Vulnerability management Windows support Windows Server administration Server management automation Linux administration Vuls IT risk management

Full Job Description Overview:

It's an exciting time to join Fisher Investments; we're investing in the future of our firm's technology and information security. Our business is growing internationally, which emphasizes the need to build an unparalleled team that promotes future global growth through strategic solutions and progress. We are looking for a Senior Infrastructure Automation Engineer to join our Infrastructure Platform Team and assist us in supporting and maintaining our Platform.

The Opportunity:

The Senior Infrastructure Automation Engineer reduces infrastructure risk by remediating vulnerabilities across the server environment and eliminating their causes through automation. You will analyze vulnerability data, prioritize findings based on risk, coordinate and perform patching, validate results, and report on remediation trends to reverse the current vulnerability trend and establish sustainable patch compliance. You will report to the Cloud Platform Team Lead.

The Day-to-Day:

Build and maintain a standardized patching process and an end-to-end automated vulnerability remediation framework, including selection, build, and maintenance of the supporting toolset Design, develops, and implements Ansible playbooks and roles, and PowerShell / Python scripts, to automate patching, remediation, infrastructure provisioning, and configuration management Analyze vulnerability findings across the server estate; categorize, correlates, and de-duplicates findings, and prioritizes remediation based on risk, exploitability, and growth Identify server and application ownership, and coordinate remediation activities with Information Security, Infrastructure, and application support teams Perform patching and vulnerability remediation across Windows and Linux server environments to validate that findings are fully closed. Reduce the existing vulnerability backlog and improve patch schedule to establish sustainable, measurable patch compliance Manage exceptions, risk acceptances, and compensating controls where remediation is not immediately achievable Track trends, and reports remediation progress and patch compliance metrics to leadership and partners Perform root cause analysis on recurring vulnerabilities and identify the vulnerable software, packages, configurations, and build patterns that drive repeat findings Identify manual and repetitive remediation steps and eliminate them through automation, tooling, and standardization Improve automation, efficiency, consistency, and adherence to security / audit requirements and controls Collaborate with System administrators, Cloud Engineers, Infosec, and Network professionals to gather requirements and provide scalable and maintainable automation solutions Provide international and 24/7 support through on-call duties and working a flexible off-hours schedule for planned and unplanned maintenance

Your Qualifications:

8+ years of experience in IT Infrastructure and Operations 5+ Years of experience in Server Management, including Windows and Linux Enterprise patch management and server vulnerability remediation Automation, playbook and role creation using tools like Ansible Hands-on experience with vulnerability management platforms such as Tenable/Qualys, including analyzing, prioritizing, and reporting on findings Experience with enterprise patching and configuration tooling (e.g. Ivanti, WSUS, SCCM / MECM, Intune, Azure Update Manager, or equivalent Linux patching tooling) Working knowledge of CVE and CVSS scoring, risk-based prioritization, and security compliance and audit requirements Proficiency in scripting languages such as Python, Bash, or PowerShell Bachelor's degree in MIS, computer science, or related field required or equivalent combination of education and experience

Why Fisher Investments:

We work for a bigger purpose: bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like: 100% paid medical, dental and vision premiums for you and your qualifying dependents A 50% 401(k) match, up to the IRS maximum 20 days of PTO, plus 10 paid holidays Family Support programs including 8 week Paid Primary Caregiver Leave, $10,000 fertility, family forming, and hormonal health assistance, and back-up child, adult, and elder care This is an in-office role. Based on your role, tenure, and performance eligibility you may have the opportunity to participate in our hybrid work from home program. This program is subject to change.

FISHER INVESTMENTS IS AN EQUAL OPPORTUNITY

EMPLOYER