Ensono

Senior Middleware Engineer

Brazil · Remote (country restricted) · Employee

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerEnsono
LocationBrazil
Work styleRemote (country restricted)
Employment typeEmployee
Employer posted25 days ago

Remote Brazil

At Ensono, our Purpose is to be a relentless ally, disrupting the status quo and unleashing our clients to Do Great Things! We enable our clients to achieve key business outcomes that reshape how our world runs. As an expert technology adviser and managed service provider with cross-platform certifications, Ensono empowers our clients to keep up with continuous change and embrace innovation.

We can Do Great Things because we have great Associates. The Ensono Core Values unify our diverse talents and are woven into how we do business. These five traits are the key to achieving our purpose.

Honesty Reliability Curiosity Collaboration Passion

RESPONSIBILITIES

Generate and provision SSL/TLS certificates using industry-standard tools and certificate authorities (CAs), managing the complete request-to-issuance workflow while maintaining secure key storage and documentation.
Monitor certificate expiration dates proactively and execute timely renewals to prevent service disruptions, maintaining 100% uptime during renewal processes.
Design and implement automated certificate management solutions that streamline generation, installation, and renewal processes, reducing manual intervention and human error through scripting and orchestration.
Integrate certificate management with CI/CD pipelines, infrastructure-as-code platforms, and container orchestration systems (Kubernetes, Docker) to enable continuous and automated certificate operations.
Ensure compliance with organizational security policies and industry standards, maintaining secure handling of certificate-related credentials, keys, and conducting regular security audits.
Troubleshoot and resolve certificate-related issues across development, operations, and security environments, providing technical support and escalation handling for production incidents.
Hands-on experience with Keyfactor Command (CLM) for automated discovery, lifecycle management and renewal at scale.
Strong understanding of PKI fundamentals — certificate chains, key algorithms (RSA/ECC), CSR generation, CRL/AIA/OCSP, and key ceremonies.
Create comprehensive documentation, runbooks, and training materials on certificate management procedures and best practices, enabling team members to support certificate operations independently.

Show full description

QUALIFICATIONS

6+ years of hands-on experience in certificate management, PKI (Public Key Infrastructure) administration, or related security infrastructure roles.
Strong technical knowledge of SSL/TLS protocols, certificate formats (X.509, PEM, DER, PKCS#12), and their implementation across various platforms and environments.
Proficiency with certificate authorities including commercial CAs (DigiCert, GlobalSign, Sectigo) and open-source solutions (Let's Encrypt, OpenSSL-based CAs).
Advanced proficiency with certificate management tools such as OpenSSL, keytool, certbot, and platform-specific certificate management utilities.
Hands-on experience administering and configuring web servers (Apache, Nginx) and application servers (Tomcat, JBoss, IIS) with certificate installations.
Demonstrated expertise in Linux/Unix and Windows server environments, including command-line administration and system-level operations.
Experience with infrastructure-as-code and automation frameworks such as Terraform, Ansible, Chef, or Puppet for managing certificate deployments at scale.
Knowledge of monitoring and alerting platforms to implement certificate status tracking, expiration monitoring, and incident notification systems.
Perform routine CA maintenance: database backups, CA certificate renewal, CRL/AIA rollover planning, and root/subordinate CA key ceremonies as needed.
Troubleshoot ADCS-related issues — enrollment failures, template permission issues, autoenrollment failures, SPN/Kerberos-related errors (e.g., WSMAN SPN issues for remote enrollment/orchestration).
Excellent organizational, communication, and problem-solving abilities with strong attention to detail, ability to document procedures clearly, and communicate technical concepts effectively.

Why Ensono?

Ensono is a place to make better happen – for our clients and for your career. You can do great things through innovation or collaboration, by learning or volunteering, or to promote diversity and inclusion. You can do

great things for your own health or for a healthier planet. Whatever it means to you to do great things we want Ensono to be the place you can do it.

We are a client-facing business, but we do encourage clients to allow us to work remotely most of the time so if you are not required to be on a client site, you can choose to work from home.

Some of our benefits include:

· CLT hiring - 40 hours weekly workload

· Work remotely

· Health Insurance - SulAmérica Prestige (available for legal dependents)

· Dental Insurance - SulAmérica (available for legal dependents)

· Life Insurance - Prudential (24x salary)

· Private Pension - Metlife (up to 6% of company match)

· Meal Voucher and Internet allowance - Flash (R$1.000,00 per month)

· Employee Assistance Program

· Wellness program

In addition to benefit package and base salary, other compensation program, depending on eligibility, include and individual performance and an equity grant under our Associate Equity Appreciation Program.

Ensono is an Equal Opportunity/Affirmative Action employer. We are committed to providing equal employment to our Associates and building a diverse and inclusive workforce. All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or other legally protected basis, in accordance with applicable law.

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.