- Request and Change Management
- Implement approved configuration changes and service requests (routes/flows, schedules, endpoints, protocols, maps).
- Modify existing application flows, decommission flows, and perform housekeeping per change control.
- Onboard new applications/partners, including endpoint definitions, credentials, keys/certificates, directory structures, and connectivity testing.

- User, Client, and Application Administration

- Create and manage user and client accounts with least-privilege access.
- Maintain authoritative inventory for users, clients, applications, trading partners, channels, and flows (data owners, SLAs, contacts).
- Manage logical groupings, permissions, virtual folders, and role-based access.

- Keys, Certificates, and Security

- Generate, renew, and rotate SSH keys, TLS/SSL certificates, and AS2 certificates; maintain keystores and truststores.
- Enforce secure cipher suites, protocol versions, and strong crypto policies.
- Implement secure configuration baselines, multi-factor admin access, and audit logging.
- Ensure encryption in transit (SFTP/FTPS/HTTPS/AS2) and at rest where applicable (PGP/GPG, platform-native encryption).

- Troubleshooting and Incident Response

- Resolve L1 escalations; diagnose and remediate L2 incidents (connectivity failures, authentication issues, transfer retries, performance bottlenecks, permission errors, broken schedules).
- Analyze logs, message tracking, protocol traces (SFTP/FTPS/AS2 HTTP headers), and error codes to restore service.
- Provide root cause analysis and corrective/preventive actions.

- Monitoring and Reliability

- Configure and maintain monitoring/alerting for service health, queue depth, transfer failures, latency/SLA breaches, certificate expirations, and capacity.
- Tune retries, timeouts, parallelism, and throttling to meet SLAs.
- Implement and maintain dashboards (e.g., Grafana/Prometheus, OEM tools, Splunk/ELK) and notification channels.

- Platform Operations

- Administer MFT servers/gateways, DMZ proxies,



and secure transport gateways.
- Manage file routing, transformations/mapping, pre/post-processing scripts, and API integrations as applicable.
- Perform OS and platform patching/upgrades with rollback plans; validate post-change functionality.

- Backup, DR, and High Availability

- Operate backups for configurations, keys/certificates, metadata, and critical repositories.
- Maintain and test HA/DR setups (active-passive clusters, load balancers, multi-node gateways); execute planned failover/switchover and recovery tests.

- Security, Compliance, and Auditing

- Maintain comprehensive audit trails; integrate with SIEM for alerting and reporting.
- Participate in security audits and support annual penetration tests; remediate findings.
- Ensure compliance with corporate policies and frameworks (ISO 27001, SOC 2, PCI-DSS, SOX as applicable).

- Documentation and Engineering

- Create and maintain SOPs, runbooks, topology diagrams, flow catalogs, onboarding templates, and change records.
- Standardize configurations, automate routine tasks, and contribute to platform hardening and reliability engineering.
- Documentation is a primary deliverable.

- On-Call Support

- Provide after-hours/on-call support and participate in planned maintenance windows and weekend work as required.

`} , {title:"Qualifications" , content:`
- Bachelor s degree in Computer Science, Information Technology, or related field.
- 3-5 years hands-on experience with enterprise MFT platforms (one or more: Axway SecureTransport/MFT, IBM Sterling File Gateway/SFG, GoAnywhere MFT, Progress MOVEit, Cleo, Globalscape/EFT)



and secure transfer protocols (SFTP, FTPS, HTTPS, AS2).
- Strong understanding of authentication, authorization, certificates/PKI, SSH keys, and encryption.
- Practical experience onboarding partners/applications and building/maintaining transfer flows with SLAs.
- Proficiency in troubleshooting connectivity, authentication, and transfer failures using logs and protocol diagnostics.
- Experience with OS administration (Linux/Windows), patching, and basic networking (firewalls, NAT, load balancers, DNS).
- Scripting/automation skills (Shell/PowerShell, Python, or platform scripting) for user/flow provisioning and monitoring.
- Familiarity with monitoring and SIEM tools; knowledge of ITIL processes (Incident, Change, Problem, Request).
- Robust communication, customer service, and analytical skills; ability to work shifts and join on-call rotation.

`},{title:"Preferred Skills",content:`
- Experience with DMZ gateway architectures, reverse proxies, and secure transport gateways.
- Knowledge of message signing, compression, and non-repudiation (e.g., AS2 MDN processing).
- PGP/GPG key management and file encryption workflows.
- API-based integrations and webhooks for event-driven transfers.
- Exposure to IaC/automation (Ansible, Terraform), CI/CD for configuration as code, and secrets management (Vault/KMS).
- Cloud MFT or managed services experience; containerization and Kubernetes familiarity.
- Understanding of compliance frameworks and secure configuration baselines.

`},{title:"Benefits",content:`
- Competitive salary and benefits.
- Learning and certification support.
- Opportunity to work with global teams and diverse MFT technologies.
- Flexible work arrangements where applicable.

`}],

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 System Engineer - MFT (Managed File Transfer) - Level 2 (Chennai)
🏢 Changepond Technologies
📍 Chennai