HCLTech
Senior Application Infrastructure Patch Management Engineer
London
Posted about 20 hours ago
Get notified of more jobs like this · No spam, ever
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
ROLE SUMMARY
The L2 Senior Application Infrastructure Patch Management Engineer owns the patching lifecycle for the full application layer including web servers, application servers, middleware components, messaging queues, and database engines. The role requires deep technical expertise to design patching runbooks, automate patch workflows, resolve complex compatibility issues, and align patching activities with vulnerability management and change management processes.
KEY RESPONSIBILITIES
- Manage end-to-end patching for web servers (Apache HTTP, Nginx, IIS), application servers (Tomcat, JBoss/WildFly, WebLogic, WebSphere), and middleware (MQ, ActiveMQ, Kafka) across on-prem and cloud environments.
- Own the Java / JDK / JRE version management strategy across the application estate.
- Assess vendor CVEs and security bulletins for application components; drive patch prioritisation using CVSS scores and application criticality.
- Develop and maintain detailed patching runbooks, rollback procedures, and post-validation scripts for each platform.
- Automate patching workflows using Ansible, Python, or shell scripting; integrate with CI/CD pipelines where applicable.
- Lead patch testing in non-production environments; validate application behaviour and performance post-patch before production rollout.
- Co-ordinate with DBA teams for database patching (Oracle PSU/RU, MS SQL CU, MySQL updates) and ensure application compatibility.
- Act as L2 escalation for patch-related application failures, class loader conflicts, and compatibility issues.
- Integrate application patch compliance data with vulnerability management tools (Qualys, Tenable) and SIEM dashboards.
- Conduct root cause analysis for patch-induced incidents; produce post-incident reports.
- Maintain CMDB accuracy for application component versions and patch status.
- Drive SLA adherence: Critical patches applied within 72 hours post-approval.
- Mentor L1 analysts; review change records and patching logs.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
TECHNICAL SKILLS & KNOWLEDGE
- Deep expertise in application server administration: Apache Tomcat, JBoss/WildFly, Oracle WebLogic, IBM WebSphere, Microsoft IIS.
- Java platform mastery: JDK/JRE lifecycle, version compatibility, classloading issues, GC tuning, and security manager updates.
- Middleware patching: IBM MQ, ActiveMQ, RabbitMQ, Apache Kafka – upgrade procedures and backward compatibility.
- Database patching knowledge: Oracle (PSU, RU, one-off patches), MS SQL Server (CU, GDR), MySQL/PostgreSQL minor/major upgrades.
- Web server security hardening post-patch: cipher suite updates, TLS/SSL certificate management, module disabling.
- Automation: Ansible playbooks, Python (Paramiko / Fabric), Bash for patching orchestration.
- CI/CD integration: Jenkins, GitLab CI, Azure DevOps – automated patching pipelines in lower environments.
- Cloud: AWS (EC2 patch via SSM), Azure (Update Manager), container image patching (Docker base image updates).
- Vulnerability management: Qualys Web Application Scanning, Tenable.io, Nexus/Trivy for container vulnerabilities.
- ITSM: ServiceNow change management, CMDB, and automated compliance workflows.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
SOFT SKILLS & COMPETENCIES
- Strong analytical skills to diagnose complex application compatibility issues post-patch.
- Excellent planning and risk communication for patching highly critical production systems.
- Collaborative approach with DBA, application development, and security teams.
- Thorough documentation – clear runbooks, RCAs, and compliance evidence.
- Continuous improvement mindset – automates repetitive tasks and drives toolchain maturity.
PREFERRED CERTIFICATIONS
- Oracle Certified Professional (OCP) – Java SE or WebLogic Server
- Red Hat Certified Engineer (RHCE)
- AWS Certified SysOps Administrator or Microsoft Azure Administrator (AZ-104)
- Certified Kubernetes Administrator (CKA) – advantageous for container environments
- CompTIA Security+ or CySA+
- ITIL 4 Foundation or Managing Professional
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Patch Management
Application Server Administration
Java JDK/JRE
Middleware
Ansible
Python
Shell Scripting
CI/CD Pipelines
Vulnerability Management
Cloud Infrastructure
Database Patching
ITSM
Web Server Hardening
Root Cause Analysis
CMDB
SLA Management
Location