Patching & Automation Specialist

CONTEXT

- The assignment covers the automation of the end-to-end patching cycle in a partially automated context, with the goal of closing the remaining manual gaps.

- The scope covers Linux and Windows servers across on-premises sites, private cloud and public cloud.

- The key challenges are reducing manual interventions, improving operational efficiency, remediating vulnerabilities faster and meeting change management requirements.

MISSIONS

- Identify and prioritize the manual touchpoints across the pre-patching, patching and post-patching cycle

◦ Define a prioritized automation roadmap

- Design and implement automated pre-patching workflows

◦ Integrate existing Python and PowerShell pre-check scripts into automated pipelines

◦ Use Ansible and/or Puppet for automation

- Develop automated remediation workflows for common failure scenarios during the patching cycle

◦ Automatically create a ServiceNow incident for failures that cannot be automated

- Identify and implement post-patching automation opportunities

◦ Ensure integration with the existing automation layers

- Integrate change management processes into the automated pipeline via ServiceNow

◦ Ensure compliance with ITIL change management requirements

◦ Automate the creation, approval and closure of change records

- Support vulnerability management activities alongside the existing automation tools

◦ Help speed up remediation cycles

- Produce and maintain an automation roadmap

◦ Define clear milestones

◦ Plan implementation timelines

◦ Track progress for the Security Control Manager and the program stakeholders

- Deliver and maintain measurable results

◦ Reduce manually executed pre-checks

◦ Reduce manual interventions during patching cycles

◦ Reduce manual post-patching tasks

◦ Ensure stakeholder visibility and satisfaction

• 6+ years of experience

• End-to-end patching cycle automation

• Development of automation workflows for the pre-patching and post-patching phases

• Integration of pre-check scripts into automated pipelines

• Automation of incident and change record creation, API integration

• ITIL change management, incident management, vulnerability management

• Hybrid environments: on-premises, private cloud and public cloud (IaaS)

• Linux and Windows OS patching, limited third-party application patching

• Automatic remediation of failure scenarios Tools

• Knowledge Ansible and/or Puppet, Python, PowerShell, ServiceNow, Linux, Windows Server