Full Job Description
Skills and Responsibilities:
• Partner with Linux and Platform Engineering teams to define and enforce hardening standards new Linux systems must enter the estate compliant from day one, not remediated after the fact
• Own the Linux vulnerability lifecycle: triage findings from Qualys, prioritize by SLA, and work with the
• Linux team to drive remediation through Puppet and Foreman
• Track and report missed-target vulnerabilities across BTN and CMRI Linux estates; escalate with documented remediation or delegation plans per team ownership model
• Validate configuration compliance against CIS benchmarks and BMO security baselines; raise Puppet module gaps to Platform Engineering for remediation
• Coordinate patching schedules and maintenance windows; ensure BMO patch schedule adherence across the Linux estate
• Support evaluation and adoption of ServiceNow as the unified patching orchestration layer, replacing manually-raised per-patch Jira change tickets with automated scheduled pipeline execution
• Deploy and validate endpoint security agents (CrowdStrike/Falcon) across Linux hosts in partnership with the Linux team Contribute to bi-weekly vulnerability reporting for senior leadership"
Salary Range - CA$ 100,000 - CA$ 110,000 Per Year
TCS does not use artificial intelligence tools for candidate screening or evaluation. This post is for a current vacancy. The hiring process includes an initial screening, followed by a technical evaluation and managerial discussion.