Senior Middleware Platform Engineer; Apache, Tomcat & Ansible
Job in
Toronto, Ontario, M5A, Canada
Listing for:
S.i. Systems
Contract
position
Listed on 2026-02-17
Job specializations:
-
IT/Tech
Cybersecurity, IT Support, Cloud Computing, Systems Engineer
Job Description & How to Apply Below
Position: Senior Middleware Platform Engineer (Apache, Tomcat & Ansible) - 85145
Line of Business: VDI and Mobility
Duration: 8 months (Possibility of Extension)
Location:
Downtown Toronto or Scarborough - Hybrid - 2-3 days onsite
Must Have Requirements:
3+ years Ansible (roles, collections, Molecule, CI/CD).Strong Linux (RHEL), networking, TLS/PKI, and load balancing fundamentals.JVM operation basics (heap/GC) and Java web app deployment experience.Responsibilities:
• Design reverse proxy and app tier topologies:
Active/active Tomcat clusters with load balancing & health checks (at Apache layer or external LB).Session management strategy: sticky sessions via cookie, or session replication/Redis-backed sessions when stickiness is not possible.• Performance engineering:
Tomcat connector threads, accept
Count, connection
Timeout, JVM sizing (Xms/Xmx), GC tuning (G1/Parallel), and thread pools.• High availability & scaling:
Multi-AZ/region design, zero-downtime rolling deploys, blue/green cutovers.Canarying via path/host routing and weighted backends (LB or Apache Proxy Pass with status routes).• Security hardening:
TLS 1.2+ (ideally 1.3) with strong cipher suites, HSTS, OCSP stapling; cert rotation via ACME/Let’s Encrypt or enterprise PKI.
For AJP, bind to localhost or private subnets, set secret
Required="true" with secret, or disable AJP unless required.Tomcat hardening: remove default apps, lock down manager/host-manager, JMX protection, minimal privileges, log sanitization.• Lifecycle management:
Patch, upgrade, and config rollouts with Ansible; drift detection & remediation.Runbooks for incident handling, failover, and rollbacks.Ansible Automation
• Develop idempotent Ansible roles and collections-based playbooks for:
OS hardening, users/groups, limits, sysctl, firewalld/ufw.Apache install, vhosts, TLS, reverse proxy config, headers, logrotate.Tomcat install (tar or distro), systemd service, server.xml, connectors, JVM/GC flags, keystores, context.xml, logging.Application deployment hooks (WAR rollout with pre/post checks), health checks, and rollback.Rolling updates (serial strategy), blue/green or canary via inventory groups or variables.Integrations: JMX exporter, , metrics/log shipping agents.Collaboration & Governance
• Partner with App teams for capacity, route maps, and deployment patterns.
• Define standards, runbooks, and design docs; perform DR tests.
• Align with security frameworks (CIS, SOC2/ISO/PCI as applicable).
Position Requirements
10+ Years
work experience
Note that applications are not being accepted from your jurisdiction for this job currently via this jobsite. Candidate preferences are the decision of the Employer or Recruiting Agent, and are controlled by them alone.
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
Search for further Jobs Here:
