Automation Patching Engineer (Ansible / AAP)

Position: Automation Patching Engineer (Infrastructure & Compliance)

Location: Hybrid- Toronto, ON

Job type: Full-time/Permanent hiring

As an Automation Patching Engineer, you will serve as the technical lead responsible for designing, prototyping, building, and scaling automated vulnerability remediation and lifecycle patching solutions across our enterprise footprint. This is a highly specialized engineering leadership role requiring 8+ years of robust infrastructure experience. You will not perform manual server updates or click through standard patching wizards. Instead, you will treat infrastructure as code - architecting automated deployment pipelines and orchestration playbooks across a massive hybrid environment (Linux, Windows, Solaris, Middleware, and Databases) utilizing the Ansible Automation Platform (AAP) to enforce ironclad security policies and operational compliance at scale.

Key Responsibilities

• Orchestrate Patch Automation: Design, build, test, and troubleshoot automated rolling patch pipelines and state-configuration playbooks utilizing the Ansible Automation Platform (AAP).
• Hybrid Fleet Management: Manage and automate patch delivery across a massive server landscape spanning Red Hat Enterprise Linux (RHEL), Microsoft Windows Server, and Oracle Solaris.
• Middleware & Database Validation: Author complex automation logic to safely handle application-tier dependencies during maintenance windows, specifically targeting JBoss EAP, IBM MQ, and Oracle Databases.
• Enterprise Tool Administration: Configure, maintain, and scale platform deployment controllers including Red Hat Satellite, OpenShift, Microsoft SCCM/MECM, and Oracle OEM OpsCenter.
• Policy & Process Engineering: Translate industry compliance frameworks and security practices into automated technical standards, defining enterprise patching policies, cadences, and verification checks.
• Technical Governance & Ownership: Act as a digital champion who thrives under technical empowerment; proactively identify systemic compliance gaps, evaluate evolving automation tools, and adapt systems to new modern infrastructure trends.

Required Qualifications

• Experience: 8-10+ years of dedicated experience in enterprise Systems Engineering, Infrastructure Automation, or DevSecOps Platform engineering within large-scale, high-consequence environments.
• Ansible Core Expertise: Expert-level command over the Ansible Automation Platform (AAP), including developing modular roles, custom playbooks, dynamic inventories, and workflow templates.
• Linux Systems Engineering: Deep administration knowledge of the Red Hat ecosystem, including RHEL architecture, Red Hat Satellite capsule management, and OpenShift clusters.
• Windows Systems Engineering: Comprehensive experience managing enterprise Windows Server fleets via SCCM / MECM integration packages.
• Unix & Legacy Platforms: Hands-on operational knowledge of Oracle Solaris systems and OEM OpsCenter lifecycle management.
• Enterprise Middleware / DB: Practical experience automating maintenance tasks, service lifecycle stops/starts, and health checks for JBoss, Oracle DB, and IBM MQ layers.
• Advanced Scripting & Security: Strong programming mindset using Bash, PowerShell, or Python to enforce organizational security constraints and configuration consistency.