Senior Middleware Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Middleware Engineer automating PKI and SSL/TLS certificate lifecycle management. Supporting Ensono’s managed technology services through secure infrastructure, compliance, and incident resolution.
Responsibilities:
- Generate and provision SSL/TLS certificates using industry-standard tools and certificate authorities, managing the complete request-to-issuance workflow while maintaining secure key storage and documentation.
- Monitor certificate expiration dates proactively and execute timely renewals to prevent service disruptions, maintaining 100% uptime during renewal processes.
- Design and implement automated certificate management solutions to streamline generation, installation, and renewal processes through scripting and orchestration.
- Integrate certificate management with CI/CD pipelines, infrastructure-as-code platforms, and Kubernetes and Docker environments.
- Ensure compliance with organizational security policies and industry standards, securely handling certificate-related credentials and keys and conducting regular security audits.
- Troubleshoot and resolve certificate-related issues across development, operations, and security environments, providing technical support and production incident escalation handling.
- Use Keyfactor Command (CLM) for automated certificate discovery, lifecycle management, and renewal at scale.
- Apply PKI fundamentals including certificate chains, RSA/ECC key algorithms, CSR generation, CRL/AIA/OCSP, and key ceremonies.
- Create documentation, runbooks, and training materials on certificate management procedures and best practices.
Requirements:
- 6+ years of hands-on experience in certificate management, PKI (Public Key Infrastructure) administration, or related security infrastructure roles.
- Strong technical knowledge of SSL/TLS protocols, certificate formats (X.509, PEM, DER, PKCS#12), and their implementation across various platforms and environments.
- Proficiency with certificate authorities including commercial CAs (DigiCert, GlobalSign, Sectigo) and open-source solutions (Let's Encrypt, OpenSSL-based CAs).
- Advanced proficiency with certificate management tools such as OpenSSL, keytool, certbot, and platform-specific certificate management utilities.
- Hands-on experience administering and configuring web servers (Apache, Nginx) and application servers (Tomcat, JBoss, IIS) with certificate installations.
- Demonstrated expertise in Linux/Unix and Windows server environments, including command-line administration and system-level operations.
- Experience with infrastructure-as-code and automation frameworks such as Terraform, Ansible, Chef, or Puppet for managing certificate deployments at scale.
- Knowledge of monitoring and alerting platforms to implement certificate status tracking, expiration monitoring, and incident notification systems.
- Perform routine CA maintenance: database backups, CA certificate renewal, CRL/AIA rollover planning, and root/subordinate CA key ceremonies as needed.
- Troubleshoot ADCS-related issues — enrollment failures, template permission issues, autoenrollment failures, SPN/Kerberos-related errors (e.g., WSMAN SPN issues for remote enrollment/orchestration).
- Excellent organizational, communication, and problem-solving abilities with strong attention to detail, ability to document procedures clearly, and communicate technical concepts effectively.
Benefits:
- CLT hiring - 40 hours weekly workload
- Work remotely
- Health Insurance - SulAmérica Prestige (available for legal dependents)
- Dental Insurance - SulAmérica (available for legal dependents)
- Life Insurance - Prudential (24x salary)
- Private Pension - Metlife (up to 6% of company match)
- Meal Voucher and Internet allowance - Flash (R$1.000,00 per month)
- Employee Assistance Program
- Wellness program
- Individual performance compensation program, depending on eligibility
- Equity grant under our Associate Equity Appreciation Program, depending on eligibility
Similar Jobs
Lift Repair Engineer
Lift Repair Engineer repairing and maintaining Stannah’s lifts across Reading and surrounding areas. Diagnosing faults, replacing components, and restoring service safely.
Lift Repair Engineer
Lift Repair Engineer repairing, diagnosing, and maintaining lifts across Luton and nearby sites. Stannah manufactures stairlifts, lifts, escalators, and homelifts and provides repair services.
Escalator Engineer – Nights
Night-shift Escalator Engineer maintaining and repairing escalators and moving walkways across Greater London transport networks. Stannah manufactures and services lifts, escalators, and homelifts.
Escalator Engineer – Days
Escalator Engineer maintaining and repairing escalators across Greater London transport hubs. Supporting safe, reliable operation for Stannah’s lift and mobility-equipment business.
Lift Engineer
Lift Engineer servicing, repairing, and maintaining lifts across Didcot for Stannah, a global access-equipment manufacturer. Attending breakdowns, fault-finding, and keeping local sites safe and compliant.
Lift Engineer
Lift Engineer servicing, repairing, and maintaining lifts across Bristol and surrounding areas. Joining Stannah, a family-owned manufacturer and provider of lift and accessibility services.
Senior Process Controls Engineer
Process Controls Engineer leading controls, equipment scale-up, and chemical refining development. Advancing Mariana Minerals’ software-driven critical-minerals supply chain and plant automation.
Senior Forensic Engineer
Senior Forensic Engineer leading large-loss investigations, expert reporting, and testimony for J.S. Held, a global consulting firm. Advising clients and developing forensic engineering business.
Civil/Structural Forensic Engineer
Forensic Civil/Structural Engineer conducting building investigations, damage assessments, and technical reporting for J.S. Held, a global consulting firm. Traveling to project sites and advising clients as an expert.
Requirement Engineer
Requirements Engineer translating banking and financial-services needs into software specifications for Qualysoft, an international IT consulting company. Supporting agile delivery, testing, and stakeholder alignment.
Tender Engineer
Tender Engineer analyzing contracts, developing bid strategies, and estimating costs for industrial EPC projects. Coordinating engineering, procurement, construction, suppliers, and subcontractors.
Senior Observability Engineer
Sr. Observability Engineer II improving Dynatrace monitoring and alert quality for NextGen Healthcare’s client-facing healthcare SaaS environment. Reducing operational noise and strengthening service reliability.
Senior Substation Project Engineer
Substation Engineer leading civil, physical, and protection-and-control designs for utility substations. Supporting projects through procurement, construction, commissioning, and energization.
Forward Deployed Engineer
Forward Deployed Engineer building applied AI, LLM systems, and ML infrastructure. Partner-facing delivery from discovery through deployment and reliability for enterprise and research teams.
Intern Projectleider – Technical Engineer, Industrie
Intern Projectleider / Technical Engineer voor industriële koel- en klimaatprojecten bij Carrier Refrigeration Benelux. Technische engineering, leverancierscoördinatie en projectdocumentatie.
Core Engineer
Core Engineer operating Webbing’s global MVNO mobile core across roaming, 5G-SA, and live production networks. Troubleshooting incidents and leading network integrations end to end.
Civil/Structural Forensic Engineer
Licensed civil/structural forensic engineer investigating construction defects, disasters, and property damage. Preparing defensible findings for insurance claims and litigation matters.
Engineer IV
Engineer IV leading PLC, HMI, and automation projects for Xylem's industrial water-treatment systems. Commissioning and optimizing controls for refineries, power plants, chemical facilities, and major customers.
L1 Service Desk Engineer
L1 Service Desk Engineer resolving client incidents and requests across Windows, Microsoft 365, networking, and Active Directory. Supporting Satellite Office’s offshore teams serving global brands.
Senior Microsoft 365 Engineer
Senior Microsoft 365 Engineer owning Microsoft 365 identity, endpoint, and compliance for WellStreet Urgent Care. Automating regulated healthcare governance with Graph, PowerShell, Intune, and Purview.