Candidatul Ideal
- Deep expertise in application server administration: Apache Tomcat, JBoss/WildFly, Oracle WebLogic, IBM WebSphere, Microsoft IIS.
- Java platform mastery: JDK/JRE lifecycle, version compatibility, classloading issues, GC tuning, and security manager updates.
- Middleware patching: IBM MQ, ActiveMQ, RabbitMQ, Apache Kafka – upgrade procedures and backward compatibility.
- Database patching knowledge: Oracle (PSU, RU, one-off patches), MS SQL Server (CU, GDR), MySQL/PostgreSQL minor/major upgrades.
- Web server security hardening post-patch: cipher suite updates, TLS/SSL certificate management, module disabling.
- Automation: Ansible playbooks, Python (Paramiko / Fabric), Bash for patching orchestration.
- CI/CD integration: Jenkins, GitLab CI, Azure DevOps – automated patching pipelines in lower environments.
- Cloud: AWS (EC2 patch via SSM), Azure (Update Manager), container image patching (Docker base image updates).
- Vulnerability management: Qualys Web Application Scanning, Tenable.io, Nexus/Trivy for container vulnerabilities.
- ITSM: ServiceNow change management, CMDB, and automated compliance workflows.
SOFT SKILLS & COMPETENCIES
- Strong analytical skills to diagnose complex application compatibility issues post-patch.
- Excellent planning and risk communication for patching highly critical production systems.
- Collaborative approach with DBA, application development, and security teams.
- Thorough documentation – clear runbooks, RCAs, and compliance evidence.
- Continuous improvement mindset – automates repetitive tasks and drives toolchain maturity.
PREFERRED CERTIFICATIONS
- Oracle Certified Professional (OCP) – Java SE or WebLogic Server.
- Red Hat Certified Engineer (RHCE).
- AWS Certified SysOps Administrator or Microsoft Azure Administrator (AZ-104).
- Certified Kubernetes Administrator (CKA) – advantageous for container environments.
- CompTIA Security+ or CySA+.
- ITIL 4 Foundation or Managing Professional.
Descrierea jobului
The L2 Senior Application Infrastructure Patch Management Engineer owns the patching lifecycle for the full application layer including web servers, application servers, middleware components, messaging queues, and database engines. The role requires deep technical expertise to design patching runbooks, automate patch workflows, resolve complex compatibility issues, and align patching activities with vulnerability management and change management processes.
KEY RESPONSIBILITIES
- Manage end-to-end patching for web servers (Apache HTTP, Nginx, IIS), application servers (Tomcat, JBoss/WildFly, WebLogic, WebSphere), and middleware (MQ, ActiveMQ, Kafka) across on-prem and cloud environments.
- Own the Java / JDK / JRE version management strategy across the application estate.
- Assess vendor CVEs and security bulletins for application components; drive patch prioritisation using CVSS scores and application criticality.
- Develop and maintain detailed patching runbooks, rollback procedures, and post-validation scripts for each platform.
- Automate patching workflows using Ansible, Python, or shell scripting; integrate with CI/CD pipelines where applicable.
- Lead patch testing in non-production environments; validate application behaviour and performance post-patch before production rollout.
- Co-ordinate with DBA teams for database patching (Oracle PSU/RU, MS SQL CU, MySQL updates) and ensure application compatibility.
- Act as L2 escalation for patch-related application failures, class loader conflicts, and compatibility issues.
- Integrate application patch compliance data with vulnerability management tools (Qualys, Tenable) and SIEM dashboards.
- Conduct root cause analysis for patch-induced incidents; produce post-incident reports.
- Maintain CMDB accuracy for application component versions and patch status.
- Drive SLA adherence: Critical patches applied within 72 hours post-approval.
- Mentor L1 analysts; review change records and patching logs.
What do we offer?
- 25 holiday days per year.
- 1066 RON monthly budget in Benefit Online Platform.
- Life Insurance cover.
- The employees working on bank holidays will be benefitting either of a paid day off in the next 30 days + 100% of the hourly base salary for that specific day OR 200% of the hourly base salary for that specific day.
- Reimbursement for eyeglasses – max 1500 RON to be claimed every 3 years.
- Childbirth allowance of 7000 RON after 1 year in HCLTech.
- Internal trainings and certifications.
*HCLTech is committed to protecting and securing the privacy and confidentiality of the Personal Data which it collects directly or indirectly from you when applying for a job at HCLTech either directly or through a third-party human resources agency. This notice (the “Notice”) outlines and explains how HCL Technologies Limited including its subsidiaries, local employing entities, associates, and affiliated companies [collectively referred to as “HCLTech”, “us,” “our”, or “we”] will process your Personal Data in accordance with applicable privacy legislation(s).
Descrierea companiei
We bring together the best of technology and our people to supercharge progress.
HCLTech is a global technology company, home to more than 227,000 on December 31, 2025, across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services.
Our purpose is to bring together the best of technology and our people to supercharge progress. We’re supercharging progress for everyone, everywhere – our clients, partners and their stakeholders, our people, communities, and the planet.
Part of the HCL group, HCLTech was listed on the stock exchanges in India at the turn of the millennium in December 1999. Since our inception, we have pioneered several industry mainstays and established leadership positions in all our chosen segments.
As a company, we are deeply focused on accelerating our ESG agenda. We are also creating technology-enabled sustainable solutions with and for our clients and partners. We embed ESG imperatives into every aspect of our business and ensure that the progress we supercharge is responsible, inclusive and beneficial to all our stakeholders in the long term. We have committed to achieving net zero by 2040.
We recognize the impact that a business like ours can deliver in elevating communities globally, and we continue to improve our efforts and take decisive actions that benefit the communities in which we work and live. Through the HCL Foundation, the CSR arm of HCLTech, we have invested more than $130 million in social development efforts serving communities throughout India across education, health, water, sanitation and hygiene, skill development and livelihoods, environment, and disaster risk reduction, response and management.
We’re powered by our people – a global, diverse, multi-generational talent - representing 161 nationalities whose unique spark, perspective and boundless passion drive our culture of proactive value creation and problem-solving.
Consolidated Revenues: US $14.7B for 12 months ending March 2026
These accolades re-affirm our commitment to our people by helping them maximize their potential and building an inclusive and progressive workplace that help our employees find their spark. To learn how we can supercharge progress for you, visit https://www.hcltech.com/en-ro/careers
- 20 Aug. 2026
Systems Engineer – Palo Alto Networks
ALEF DISTRIBUTION RO S.A.
București10000 - 15000 RON net / lună


