Application Infrastructure Engineer – Oracle Middleware & Vulnerability Management, Assistant Vice President

Role Overview

We are looking for an experienced Application Infrastructure Engineer with a strong background in Oracle Middleware, application infrastructure, vulnerability management and patching.

The successful candidate will be responsible for maintaining the security, stability and resilience of infrastructure supporting critical business applications, including Billing, Corporate Finance and Regulatory Reporting platforms.

This is a hands-on engineering role requiring strong experience across Oracle WebLogic, Oracle Access Manager (OAM), Oracle HTTP Server (OHS), Oracle Internet Directory (OID), Oracle Unified Directory (OUD), Single Sign-On (SSO) and associated middleware technologies.

You will work closely with application, infrastructure, security and vendor teams to manage vulnerabilities, implement security patches, support middleware upgrades and ensure application environments remain secure, compliant and operationally resilient.

Key Responsibilities

Application Infrastructure & Patch Management

• Develop, implement and maintain patch-management standards, procedures and controls across application infrastructure.
• Plan, coordinate and execute security patches and infrastructure upgrades across development, test and production environments.
• Manage patching activities for Oracle middleware technologies including WebLogic, OAM, OID/OUD, OHS and SSO.
• Assess patches based on security risk, vulnerability severity, business impact and operational requirements.
• Establish appropriate change-management processes and controls for patch deployment.
• Minimise application disruption through effective planning, testing, implementation and post-deployment validation.
• Maintain clear documentation covering patching activities, risks, exceptions and remediation status.

Vulnerability Management & Security

• Identify, assess and prioritise application and infrastructure vulnerabilities based on severity, risk and potential business impact.
• Work with security teams to incorporate vulnerability assessments, security advisories and threat intelligence into remediation strategies.
• Coordinate with internal technology teams to gather and assess vulnerability information from security scanning tools, penetration testing and other security sources.
• Track vulnerabilities through remediation and support timely closure of identified security risks.
• Conduct regular reviews of patching and vulnerability-management processes and identify opportunities for continuous improvement.
• Provide subject-matter expertise on vulnerability remediation, patching standards and application-infrastructure security.

Stakeholder & Vendor Management

• Partner with IT Security, Network Operations, Application Development, Infrastructure and System Administration teams to coordinate remediation activities.
• Work with external vendors to resolve vulnerabilities affecting third-party applications, software and infrastructure components.
• Communicate technical risks, remediation requirements and implementation plans clearly to both technical and non-technical stakeholders.
• Coordinate activities across multiple teams while managing competing priorities and critical production requirements.

Required Experience & Technical Skills

• 6+ years of experience in application infrastructure, middleware, production support or a related infrastructure engineering discipline.
• At least 3 years' experience supporting business-critical applications in production environments.
• At least 2 years' experience in vulnerability management, security patching or application security.
• Strong hands-on experience with Oracle WebLogic Server and Oracle middleware technologies.
• Hands-on experience with Oracle Access Manager (OAM), Oracle Internet Directory (OID), Oracle Unified Directory (OUD), Oracle HTTP Server (OHS) and Oracle Single Sign-On (SSO).
• Experience performing Oracle middleware patching, upgrades and vulnerability remediation.
• Experience integrating Single Sign-On and identity/access-management technologies with enterprise applications.
• Good understanding of web application architecture, middleware platforms and common application/infrastructure security vulnerabilities.
• Exposure to cloud environments such as AWS, Microsoft Azure and/or Oracle Cloud.
• Strong understanding of patch management, vulnerability management, change management and production-support practices.
• Excellent troubleshooting, analytical and problem-solving skills.
• Ability to manage multiple technical priorities in a complex, fast-paced environment.
• Strong communication skills and the ability to work effectively across technical, security, business and vendor teams.

Education

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline, or equivalent relevant professional experience.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at

Read our CEO Statement