高级中间件工程师

Remote Brazil
At Ensono, our Purpose is to be a relentless ally, disrupting the status quo and unleashing our clients to Do Great Things! We enable our clients to achieve key business outcomes that reshape how our world runs. As an expert technology adviser and managed service provider with cross-platform certifications, Ensono empowers our clients to keep up with continuous change and embrace innovation.
We can Do Great Things because we have great Associates. The Ensono Core Values unify our diverse talents and are woven into how we do business. These five traits are the key to achieving our purpose.
Honesty Reliability Curiosity Collaboration Passion
RESPONSIBILITIES

• Generate and provision SSL/TLS certificates using industry-standard tools and certificate authorities (CAs), managing the complete request-to-issuance workflow while maintaining secure key storage and documentation.

• Monitor certificate expiration dates proactively and execute timely renewals to prevent service disruptions, maintaining 100% uptime during renewal processes.

• Design and implement automated certificate management solutions that streamline generation, installation, and renewal processes, reducing manual intervention and human error through scripting and orchestration.

• Integrate certificate management with CI/CD pipelines, infrastructure-as-code platforms, and container orchestration systems (Kubernetes, Docker) to enable continuous and automated certificate operations.

• Ensure compliance with organizational security policies and industry standards, maintaining secure handling of certificate-related credentials, keys, and conducting regular security audits.

• Troubleshoot and resolve certificate-related issues across development, operations, and security environments, providing technical support and escalation handling for production incidents.

• Hands-on experience with Keyfactor Command (CLM) for automated discovery, lifecycle management and renewal at scale.

• Strong understanding of PKI fundamentals — certificate chains, key algorithms (RSA/ECC), CSR generation, CRL/AIA/OCSP, and key ceremonies.

• Create comprehensive documentation, runbooks, and training materials on certificate management procedures and best practices, enabling team members to support certificate operations independently.

QUALIFICATIONS

• 6+ years of hands-on experience in certificate management, PKI (Public Key Infrastructure) administration, or related security infrastructure roles.

• Strong technical knowledge of SSL/TLS protocols, certificate formats (X.509, PEM, DER, PKCS#12), and their implementation across various platforms and environments.

• Proficiency with certificate authorities including commercial CAs (DigiCert, GlobalSign, Sectigo) and open-source solutions (Let's Encrypt, OpenSSL-based CAs).

• Advanced proficiency with certificate management tools such as OpenSSL, keytool, certbot, and platform-specific certificate management utilities.

• Hands-on experience administering and configuring web servers (Apache, Nginx) and application servers (Tomcat, JBoss, IIS) with certificate installations.

• Demonstrated expertise in Linux/Unix and Windows server environments, including command-line administration and system-level operations.

• Experience with infrastructure-as-code and automation frameworks such as Terraform, Ansible, Chef, or Puppet for managing certificate deployments at scale.

• Knowledge of monitoring and alerting platforms to implement certificate status tracking, expiration monitoring, and incident notification systems.

• Perform routine CA maintenance: database backups, CA certificate renewal, CRL/AIA rollover planning, and root/subordinate CA key ceremonies as needed.

• Troubleshoot ADCS-related issues — enrollment failures, template permission issues, autoenrollment failures, SPN/Kerberos-related errors (e.g., WSMAN SPN issues for remote enrollment/orchestration).

• Excellent organizational, communication, and problem-solving abilities with strong attention to detail, ability to document procedures clearly, and communicate technical concepts effectively.

Why Ensono?
Ensono is a place to make better happen – for our clients and for your career. You can do great things through innovation or collaboration, by learning or volunteering, or to promote diversity and inclusion. You can do
great things for your own health or for a healthier planet. Whatever it means to you to do great things we want Ensono to be the place you can do it.
We are a client-facing business, but we do encourage clients to allow us to work remotely most of the time so if you are not required to be on a client site, you can choose to work from home.
Some of our benefits include:
· CLT hiring - 40 hours weekly workload
· Work remotely
· Health Insurance - SulAmérica Prestige (available for legal dependents)
· Dental Insurance - SulAmérica (available for legal dependents)
· Life Insurance - Prudential (24x salary)
· Private Pension - Metlife (up to 6% of company match)
· Meal Voucher and Internet allowance - Flash (R$1.000,00 per month)
· Employee Assistance Program
· Wellness program
In addition to benefit package and base salary, other compensation program, depending on eligibility, include and individual performance and an equity grant under our Associate Equity Appreciation Program.
Ensono is an Equal Opportunity/Affirmative Action employer. We are committed to providing equal employment to our Associates and building a diverse and inclusive workforce. All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or other legally protected basis, in accordance with applicable law.
Originally posted on Himalayas