Senior Middleware Engineer

Remote Brazil

At Ensono , our Purpose is to be a relentless ally, disrupting the status quo and unleashing our clients to Do Great Things! We enable our clients to achieve key business outcomes that reshape how our world runs. As an expert technology adviser and managed service provider with cross-platform certifications, Ensono empowers our clients to keep up with continuous change and embrace innovation.

We can Do Great Things because we have great Associates. The Ensono Core Values unify our diverse talents and are woven into how we do business. These five traits are the key to achieving our purpose.

Honesty Reliability Curiosity Collaboration Passion
RESPONSIBILITIES

- Generate and provision SSL/TLS certificates using industry-standard tools and certificate authorities (CAs), managing the complete request-to-issuance workflow while maintaining secure key storage and documentation.

- Monitor certificate expiration dates proactively and execute timely renewals to prevent service disruptions, maintaining 100% uptime during renewal processes.

- Design and implement automated certificate management solutions that streamline generation, installation, and renewal processes, reducing manual intervention and human error through scripting and orchestration.

- Integrate certificate management with CI/CD pipelines, infrastructure-as-code platforms, and container orchestration systems (Kubernetes, Docker) to enable continuous and automated certificate operations.

- Ensure compliance with organizational security policies and industry standards, maintaining secure handling of certificate-related credentials, keys, and conducting regular security audits.

- Troubleshoot and resolve certificate-related issues across development, operations, and security environments, providing technical support and escalation handling for production incidents.

- Hands-on experience with Keyfactor Command (CLM) for automated discovery, lifecycle management and renewal at scale.

- Strong understanding of PKI fundamentals — certificate chains, key algorithms (RSA/ECC), CSR generation, CRL/AIA/OCSP, and key ceremonies.

- Create comprehensive documentation, runbooks, and training materials on certificate management procedures and best practices, enabling team members to support certificate operations independently.

QUALIFICATIONS

- 6+ years of hands-on experience in certificate management, PKI (Public Key Infrastructure) administration, or related security infrastructure roles.

- Strong technical knowledge of SSL/TLS protocols, certificate formats (X.509, PEM, DER, PKCS#12), and their implementation across various platforms and environments.

- Proficiency with certificate authorities including commercial CAs (DigiCert, GlobalSign, Sectigo) and open-source solutions (Let's Encrypt, OpenSSL-based CAs).

- Advanced proficiency with certificate management tools such as OpenSSL, keytool, certbot, and platform-specific certificate management utilities.

- Hands-on experience administering and configuring web servers (Apache, Nginx) and application servers (Tomcat, JBoss, IIS) with certificate installations.

- Demonstrated expertise in Linux/Unix and Windows server environments, including command-line administration and system-level operations.

- Experience with infrastructure-as-code and automation frameworks such as Terraform, Ansible, Chef, or Puppet for managing certificate deployments at scale.

- Knowledge of monitoring and alerting platforms to implement certificate status tracking, expiration monitoring, and incident notification systems.

- Perform routine CA maintenance: database backups, CA certificate renewal, CRL/AIA rollover planning, and root/subordinate CA key ceremonies as needed.

- Troubleshoot ADCS-related issues — enrollment failures, template permission issues, autoenrollment failures, SPN/Kerberos-related errors (e.g., WSMAN SPN issues for remote enrollment/orchestration).

- Excellent organizational, communication, and proble