Senior Middleware Engineer – Vulnerability Management

Operate and secure enterprise middleware platforms, with a strong focus on finding and fixing vulnerabilities. You’ll coordinate with security teams, resolve complex service issues, and improve reliability through upgrades, hardening, automation, and clear operational documentation. The role also includes coaching teammates and explaining technical risks to non-technical stakeholders.

• Administer middleware platforms such as Web Logic, Tomcat, JBoss/Wild Fly, IBM MQ, Apache, and IIS, including installation, configuration, upgrades, and troubleshooting.
• Review vulnerability scan findings, assess exposure and risk, and apply patches, version upgrades, configuration changes, and hardening measures.
• Coordinate vulnerability remediation with security teams and track fixes against policies, benchmarks, and agreed timelines.
• Resolve complex incidents, perform root-cause analysis, and implement lasting fixes while following incident, problem, and change processes and service levels.
• Build scripts and automation for patching, deployments, and routine operations; maintain monitoring tools, runbooks, and knowledge articles.
• Plan releases, contribute to service improvements and capacity planning, and mentor teammates.

• A bachelor’s degree and 6-8 years of relevant experience, or an equivalent combination of education and experience.
• Strong hands-on experience operating middleware or application servers in production environments.
• Demonstrated experience remediating vulnerabilities based on scan reports through patching, upgrades, and hardening.
• Solid Linux or Unix administration skills and scripting experience with tools such as Bash, Python, or WLST.
• Experience with ITIL or similar incident, problem, and change management processes.

• Familiarity with vulnerability scanners such as Tenable/Nessus, Qualys, or Rapid7; SSL/TLS certificate management;
  Java runtime patching; or secure configuration.
• Experience with Ansible and with mentoring or leading technical staff.

The listing describes paid time off, a 401(k), healthcare, health savings account matching, and learning opportunities. The position may involve access to export-controlled technology, so eligibility for any required U.S. government authorizations may be necessary.