Vulnerability Remediation and Patching Architect

Role - Vulnerability Remediation and Patching Architect

Must have: Nessus, Security Event Analysis,Technical solution implementation-SIEM,Vulnerability & Compliance Remediation

hybrid 3 days in Toronto Office

Role Summary

Provide architecture leadership for enterprise vulnerability remediation, security hardening and patching across AIX, Linux and Windows. Translate vulnerability intelligence into safe, scalable remediation strategies and act as the senior technical and customer-facing authority.

Key Responsibilities

• Own the end-to-end remediation architecture, including intake, risk prioritization, technical treatment, scheduling, validation, exception handling and closure evidence.

• Design cross-platform patching and hardening patterns for AIX, Linux and Windows while minimizing service disruption and protecting business-critical workloads.

• Review Rapid7, Kenna Security and Qualys findings; correlate severity, exploitability, asset criticality, exposure and operational risk to define remediation priority.

• Create remediation roadmaps, reference architectures, technical standards, runbooks, decision records and governance metrics.

• Lead complex technical decisions, root-cause analysis, recurring-vulnerability elimination and compensating-control recommendations.

• Architect automation using Ansible/AAP and scripting, with source control, peer review, testing, rollback and auditability.

• Partner with Security, infrastructure towers, application owners, change management and customer leadership; chair technical reviews and executive status discussions.

• Mentor SMEs and engineers and establish reusable engineering practices across technology towers.

Required Technical Skills

• Advanced AIX, RHEL/Linux and Windows Server patching, troubleshooting and security hardening

• Ansible/Red Hat Ansible Automation Platform, PowerShell, Python and Shell scripting

• Rapid7 InsightVM, Kenna Security/Cisco Vulnerability Management and Qualys VMDR

• CVSS, risk-based prioritization, vulnerability lifecycle, remediation validation and exception governance

• CIS Benchmarks and practical hardening controls; strong understanding of NIST-aligned security practices

• Enterprise change, release, incident and problem management; ServiceNow awareness

• Architecture documentation, dependency analysis, maintenance-window planning, rollback and evidence management

• Git-based version control and automation quality controls

Communication, Customer-Facing and Leadership Skills

• Executive-level written and verbal communication with clear translation of technical risk into business impact

• Strong customer-facing presence, workshop facilitation, negotiation and defensible recommendation skills

• Ability to challenge unsafe approaches constructively and secure agreement across multiple technical owners

• Crisp status reporting, decision documentation and escalation management

Education and Preferred Credentials

• Bachelor’s degree in Computer Science, Information Technology, Engineering or a related discipline, or equivalent relevant professional experience.

• Relevant Red Hat, Microsoft, AIX, security or ITIL certifications

• Experience in large, regulated and multi-vendor enterprise environments

Interview Focus

Assess architecture judgment, enterprise scale, cross-platform dependencies, customer influence and technical leadership. Include at least one real-world failure scenario and require the candidate to explain diagnosis, safe remediation, rollback, evidence and stakeholder communication.

Hiring Note

This role requires 10+ years of relevant experience. Equivalent enterprise products may be considered when the candidate demonstrates directly transferable hands-on capability.