Senior Middleware Engineer

Somewhere behind every parcel this company moves is a message that has to arrive — and IBM MQ is what makes sure it does. This global logistics IT unit needs a strong middleware specialist to keep that backbone (IBM MQ, plus Kafka and the wider stack) running — no travel, no billing pressure, just the tech. Open to a solid generic middleware profile willing to grow into IBM MQ too. CZK 90,000–105,000 gross + 15% annual bonus, Prague (hybrid — 2 days on-site, 3 days home office per week), permanent contract, start date to be agreed.

I'm interested

Job Type

Permanent

Job type

Full time

Salary

90.000 - 105.000 Kč

Location

Hlavní město Praha
Hybrid

ID

STQ_532_JOB


About our client

This is the global IT arm of one of the world's largest logistics companies — over 5,600 IT professionals across continents, keeping the technology backbone running behind a business that moves shipments through hundreds of countries. The Prague office is one of the group's key IT hubs, and along with locations in Malaysia, India, Germany and the Americas, it holds Great Place to Work certification. The philosophy here is simple: digitalisation should work quietly in the background. The messaging and middleware layer is exactly what keeps communication between hundreds of internal systems running — and this team is still growing.

Job description

You're part of an expert team for the middleware and messaging layer — IBM MQ, Kafka, WebLogic, WebSphere Application Server, Tomcat, JBoss, Apache, IIS — plus the virtualisation and infrastructure layer underneath. You handle what didn't get fixed one level down: a stuck queue in IBM MQ, a crashed application server, a bug that needs escalating straight to the vendor. It's hands-on technical work with real impact — without you, communication between dozens of internal systems simply doesn't run.

Key Responsibilities:
— You diagnose and resolve non-trivial problems across middleware platforms — the stuff lower-level support couldn't crack
— You get into the virtualisation and infrastructure layer underneath the applications, not just the middleware itself
— You work with other IT teams on harder troubleshooting that goes beyond middleware
— You escalate to vendors (IBM, Oracle, Red Hat) for bugs and security fixes, and you see it through to resolution
— You pass on what you learn — you know where the next problem will show up, before it does

What This Role Is NOT:
— The Prague office is part of the deal — this isn't a remote role
— On-call rotates between colleagues and only covers weekends — nobody's chasing you on weekdays

Operating Model:
Follow-the-sun team across Asia, Europe and the US, with on-call on a rotation, weekends only. Based in Prague, hybrid — 2 days on-site, 3 days home office per week, with flexible hours. English is the working language for cross-region collaboration. The team manager has the same technical background — started out as a middleware/Unix engineer, now runs the global messaging team.

Requirements

— Middleware background — hands-on IBM MQ experience, or a strong generic middleware background (JBoss, Apache, WebLogic/WebSphere) with willingness to grow into IBM MQ
— Linux — RedHat experience in a production environment
— Independence under pressure — ability to work independently and prioritise when handling incidents
— English — advanced, spoken and written, for daily cross-region communication

No IBM MQ experience yet? If the middleware fundamentals and Linux are solid, we still want to talk.

Nice to Have:
— Kafka
— Windows Server, OpenShift
— Basic Microsoft Azure
— Experience with SFTP and related transfer processes
— Experience escalating to vendors (IBM, Oracle, Red Hat)

Offer & Terms

— CZK 90,000–105,000 gross + 15% annual bonus
— Permanent contract, full time
— 25 days holiday + 6 self-sickness days, full compensation for up to 10 sick days a year, up to 3 extra personal days for long-term service
— Ongoing professional training and certifications
— Flexible working hours, hybrid — 2 days on-site, 3 days home office per week
— Cafeteria programme with fully covered meal vouchers, pension and life insurance, health package
— Multisport card, partner discounts, company events, Health Days, Fruit days
— One-off grant on the birth of a child
— Employee share purchase programme for the parent group, at a discount

More information

Interested? Apply or reach out — no CV needed, your LinkedIn and a few lines about your experience are enough. We reply to everyone within two business days.
| linkedin.com/in/jirisoljak
You'll speak directly with a senior IT recruiter with hands-on technical background — a relevant conversation, no HR fluff, no ghosting.
Open only to candidates eligible to work in the EU without visa sponsorship, residing long-term in the Czech Republic, with proficiency in Czech or Slovak.

I'm interested
I am interested
>_Let us know about you

    Similar jobs


    Principal QRadar Engineer / SIEM Competence Lead

    Location

    Hlavní město Praha
    Hybrid

    Job Type

    Permanent
    Contract

    Field

    Networks / Security

    Salary

    90.000-150.000 CZK

    Česká technologická společnost specializovaná na kybernetickou bezpečnost, která více než deset let poskytuje služby v oblasti bezpečnostního monitoringu, detekce hrozeb a provozu SOC. Pokrývá celý cyklus bezpečnostních řešení – od architektonického návrhu a implementace, přes migrace a integrace, až po dlouhodobý provoz, konzultační podporu a rozvoj bezpečnostních služeb. Tým odborníků pracuje napříč doménami SIEM, SOAR, EDR/XDR, NDR, Data Security, network visibility, threat hunting a vulnerability & patch managementu. Technologicky staví na širokém portfoliu platforem, například IBM QRadar, Palo Alto XSIAM/XDR ekosystému, Fortinet SecOps, SentinelOne, Greycortex nebo Flowmon, doplněných o vlastní nástroje a interní know-how. Přístup společnosti je postavený na kombinaci Threat Intelligence, Purple Teamingu a proaktivního vyhledávání hrozeb. Projekty probíhají v prostředí velkých enterprise organizací i subjektů kritické infrastruktury, s důrazem na odbornou kvalitu, technologickou nezávislost a úzkou spolupráci se zákazníky.• Expertní zkušenost s IBM QRadar – práce s Offenses, AQL, correlation rules, DSM, parsingem a onboardingem log source. • Znalost datových zdrojů a jejich významu pro detekce (firewally, OS logy, identity, aplikace, proxy, síťové prvky, cloud služby). • Schopnost navrhovat, ladit a validovat detekční logiku v prostředí QRadar a orientovat se v architektuře SIEM řešení. • Znalost principů detection engineering a práce s rámcem MITRE ATT&CK. • Přehled v infrastruktuře a běžných bezpečnostních technologiích (proxy, IDS/IPS, WAF, identity služby, operační systémy, cloud). • Zkušenost s dalšími SIEM nebo SOAR platformami (např. FortiSIEM, Splunk, Elastic, Microsoft Sentinel, XSOAR/XSIAM, Resilient) je výhodou, nikoli podmínkou. • Schopnost konzultovat technická řešení, vést věcné diskuse a komunikovat s bezpečnostním i infrastrukturním týmem zákazníka. • Analytické myšlení, pečlivost a schopnost samostatně rozhodovat v technických otázkách. • Angličtina na úrovni běžné technické komunikace a práce s dokumentací.Pozice je vhodná pro technického experta nebo architekta, který se může věnovat čistě technické práci, nebo se postupně stát hlavním kompetenčním lídrem celé SIEM Engineering Competence. • Návrh, konfigurace a rozvoj bezpečnostních řešení postavených na IBM QRadar SIEM – architektura, datové toky, integrační model a optimalizace prostředí. • Realizace projektů v oblasti SIEM implementací, onboarding nových log source, DSM mapping a event parsing. • Tvorba, úpravy a ladění correlation rules, AQL dotazů a detekční logiky. • Práce s Offenses, tuning alertů, validace detekcí a návrh navazujících workflow. • Podíl na rozvoji use-case knihovny a mapování detekcí na MITRE ATT&CK. • Konzultační a technická podpora zákazníků při návrhu detekčních strategií a optimalizaci SIEM pravidel. • Účast na proaktivních aktivitách (analýza dat, threat hunting, baseline chování). • Analýza možností a trendů v oblasti SIEM/SOAR technologií a podíl na rozvoji dalších platforem mimo IBM QRadar (např. FortiSIEM, XSIAM ingest nebo jiné konkurenční SIEMy). • Spolupráce na technologickém rozvoji SIEM stacku firmy a příležitost pracovat i s dalšími vendory v rámci SIEM Engineering Competency. • Spolupráce s interními týmy a přenos know-how.Pozice je vhodná pro technicky zaměřené specialisty, konzultanty i architekty. Otevřená je zkušeným mediorům i seniorům, kteří mají přehled napříč moderními bezpečnostními technologiemi. Pozice je nabraná přímo s vedením společnosti a technickými experty, takže dostanete přesné informace o reálném fungování týmu i používaných technologiích. Zaujalo? Ozvěte se! Výběrovým procesem vás provede seniorní IT recruiter s reálnou technickou a doménovou zkušeností – žádné obecné fráze, ale věcná a profesionální debata. This opportunity is open only to candidates based in the Czech Republic with valid EU work authorization and a registered EU freelance/business license (B2B). No visa sponsorship is available.

    Enterprise Network Architect

    Location

    Hlavní město Praha
    Hybrid

    Job Type

    Permanent
    Contract

    Field

    Networks / Security

    Salary

    160.000 - 200.000 CZK

    An international technology group with more than 30 years in the market, 800+ professionals, and a presence across several countries in Central and Eastern Europe. It delivers projects in IT infrastructure, data centres, cloud, cybersecurity and IT outsourcing for customers ranging from banking and public administration to European enterprise organisations. Why This Role Exists Now: Regulatory pressure, NIS2 in particular, is pushing organisations toward segmented, auditable networks. Microsegmentation and identity-based access are becoming baseline requirements, and the volume of enterprise network engagements has grown accordingly. That architecture layer is currently covered on an ad hoc basis — by the presales team or by drawing on capacity from elsewhere in the group. The company is building a permanent capability instead.What Matters Most: - CCNP Enterprise Architecture or equivalent - certification at architectural, not implementation, level - Minimum 5 years in enterprise network design - demonstrable experience across switching, routing, microsegmentation and security - Software-defined networking and automation - conceptual command is required; hands-on implementation is not - Consultative capability - the ability to present and defend a design to a customer stakeholder is a condition of the role, not an advantage English at B2/C1 for the international team; Czech or Slovak for day-to-day work. Nice to Have: - CCNP Data Center or CCNP Security - Cloud or multi-cloud experience - TOGAF or ArchiMate - Practical involvement in lab work or proof-of-concept builds These describe the working context, not selection criteria.Role / Mission: You own the architecture of enterprise network and data centre solutions for large customers — from initial concept through customer-facing validation to oversight during implementation. You work alongside the internal presales team, and when a design change becomes necessary during implementation, you adapt the concept rather than handing it off. Within twelve months, the expectation is a set of delivered engagements, established relationships with the customers you have worked with, and a working model with presales that moves designs into delivery without unnecessary iteration. Key Responsibilities: - Design and optimise enterprise networks — LAN, WAN and SD-WAN — for large-scale customer environments - Present and defend technical solutions directly to customers in consultative settings - Work with presales and sales on accounts you subsequently deliver - Govern design changes during implementation, maintaining the integrity of the original concept - Coordinate with service providers on configuration standards; review Bill of Materials and assess solution sizing What This Role Is NOT: - Not an implementation role — configuration delivery sits with the engineering team - Not a hand-off model — architectural ownership continues into implementation, not concluding at design sign-off - Not a back-office technical function — customer-facing consultation is central to the role, not adjacent to it Operating Model: Prague-based, hybrid. On-site presence with customers at least twice a week; the majority of the customer base is in and around Prague. More time in the office during onboarding, with greater flexibility thereafter. English at B2/C1 for the international team; Czech or Slovak for day-to-day work. Direct report: Head of Network & Security division. Options: The engagement model is open to discussion: - Permanent employment - 160 000-180 000 CZK/month with a company car - Contract (self-employed) - day rate up to 11 000 CZK, agreed individually - Reduced capacity - four days per week is acceptable under either model for the right profileInterested? Apply or reach out — no CV needed, your LinkedIn and a few lines is enough. We reply to everyone within two business days. | linkedin.com/in/jirisoljak You will speak directly with a senior IT recruiter with a hands-on technical background — a relevant conversation without the HR fluff. Process: - A short introductory call, 15 to 30 minutes - A maximum of two rounds — where there is a clear fit, a decision can follow the first - An in-person meeting precedes the final decision - You always know where you stand Open only to candidates eligible to work in the EU without visa sponsorship, residing in the Czech Republic long-term, with proficiency in Czech or Slovak. The contract track additionally requires a registered EU freelance or business licence.

    IT jobs