Senior Middleware Engineer – Vulnerability Management

This is a fully remote position, open to applicants in Connecticut.

📋 Description

• Provide daily assistance for middleware platforms, including Oracle WebLogic, Apache Tomcat, JBoss/WildFly, IBM MQ, and Apache/IIS.

• Lead efforts to address vulnerabilities by analyzing scan results, prioritizing risks, and applying patches, version upgrades, configuration adjustments, and hardening measures.

• Ensure adherence to security policies and CIS Benchmarks while tracking the resolution of issues until closure.

• Collaborate with Security teams to assess vulnerabilities and vendor advisories, identify exposed systems, and strategize remediation efforts.

• Resolve intricate incidents and problems, conduct root-cause analyses, and implement lasting solutions.

• Manage incidents, problems, and changes through ITSM processes while adhering to service level agreements.

• Mentor and guide team members while maintaining comprehensive documentation of procedures.

• Plan and execute middleware and associated application releases, updates, and corrections.

• Develop and sustain Bash, Python, WLST, and Ansible scripts along with automation processes.

• Assess, recommend, and maintain monitoring and management tools.

• Contribute to middleware projects, capacity planning, and enhancements to services.

• Articulate technical issues and risks to non-technical stakeholders effectively.

• Maintain documentation, runbooks, and knowledge articles.

⛳️ Requirements

• BA/BS degree with 6–8 years of relevant experience, or an equivalent combination of education and professional expertise.

• Robust hands-on experience managing middleware or application server platforms in enterprise production settings.

• Demonstrated experience in addressing vulnerabilities through patching, upgrades, and hardening based on scan reports.

• Strong Linux/Unix administration capabilities.

• Proficient in scripting and automation with Bash, Python, and WLST.

• Familiarity with incident, problem, and change management (ITIL or similar methodologies).

• Experience with vulnerability scanning tools, such as Tenable/Nessus, Qualys, or Rapid7 (preferred).

• Knowledge of SSL/TLS certificate management, Java runtime patching, and secure configuration (preferred).

• Experience with Ansible (preferred).

• Background in mentoring or leading technical staff (preferred).

• Eligibility for any necessary U.S. Government authorizations for access to export-controlled commodities and technology.

🏝️ Benefits

• Unlimited paid time off.

• 401(k) plan.

• Comprehensive healthcare coverage.

• HSA matching.

• Continuous learning opportunities.

• Support for work-life balance.