5 hours ago
Remote, BrazilSenior
Responsibilities
- Generate, provision, install, renew, monitor, and document SSL/TLS certificates throughout their lifecycle.
- Design and implement automated certificate-management solutions using scripting, orchestration, infrastructure-as-code, and container platforms.
- Integrate certificate operations with CI/CD pipelines, Terraform, Ansible, Chef, Puppet, Kubernetes, and Docker.
- Maintain secure certificate credentials, keys, CA infrastructure, backups, audits, and compliance processes.
- Troubleshoot certificate, ADCS, enrollment, template-permission, autoenrollment, SPN, Kerberos, and production issues.
- Administer certificate installations on Apache, Nginx, Tomcat, JBoss, IIS, Linux/Unix, and Windows systems.
- Create runbooks, documentation, and training materials for certificate-management procedures.
- Provide technical support and escalation handling across development, operations, and security environments.
Requirements
- At least 6 years of hands-on experience in certificate management, PKI administration, or related security infrastructure roles.
- Strong knowledge of SSL/TLS, X.509, PEM, DER, PKCS#12, RSA, ECC, certificate chains, CSR generation, CRL, AIA, OCSP, and key ceremonies.
- Experience with Keyfactor Command, OpenSSL, keytool, certbot, and platform-specific certificate-management utilities.
- Experience with commercial CAs including DigiCert, GlobalSign, and Sectigo, as well as Let's Encrypt and OpenSSL-based CAs.
- Hands-on administration and configuration of Apache, Nginx, Tomcat, JBoss, and IIS.
- Expertise in Linux/Unix and Windows server environments, including command-line and system-level administration.
- Experience with Terraform, Ansible, Chef, or Puppet for certificate deployment automation.
- Knowledge of monitoring and alerting platforms for certificate tracking, expiration monitoring, and incident notification.
- Strong organizational, communication, documentation, troubleshooting, and problem-solving abilities.
Benefits
- Remote work from Brazil with a 40-hour weekly CLT workload.
- Health insurance and dental insurance through SulAmérica, including legal dependents.
- Life insurance through Prudential and private pension through Metlife with up to 6% company match.
- Meal voucher and internet allowance through Flash of R$1.000,00 per month.
- Employee Assistance Program and wellness program.
- Additional compensation may include an equity grant under the Associate Equity Appreciation Program, depending on eligibility.
Tech Stack
Categories
About Ensono
Ensono provides managed services and consulting for enterprises running mission-critical workloads across mainframe, private, and public clouds. It supports application modernization, cloud migrations, and ongoing operations in AWS, Azure, and Google Cloud through recurring service contracts and advisory projects. Founded in 1969 and headquartered in Downers Grove, Illinois, the company operates globally and is privately held.